Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.
https://www.tenable.com/blog/microsofts-april-2025-patch-tuesday-addresses-121-cves-cve-2025-29824
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27740