Authenticated code execution via undisclosed input validation

Remote code execution in Microsoft Windows Active Directory allows remote authenticated users to execute code over an adjacent network. Microsoft identifies improper input validation as the cause but has not disclosed the affected Active Directory locus or the untrusted input and operation involved. A low-privilege account and adjacent-network access are required; successful exploitation executes attacker-controlled code on the affected server.