Authenticated privilege escalation via weak certificate authentication

Weak authentication in Microsoft Windows Active Directory Certificate Services allows remote authenticated users to elevate privileges over a network. Microsoft has not published the affected function or the exact authentication operation that mishandles attacker-controlled input. A low-privileged account and network access are required, and successful exploitation grants elevated Windows privileges.