Skip to content
securitytabs

CVE-2024-49019

High7.8

Windows Server 2019: Active Directory Certificate Services Elevation of Privilege Vulnerabilitytitle from the CVE record

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVSS
7.8v3.1
EPSS (exploit probability)
2.0%81th pct
CISA KEV
Not listed

EPSS trendFIRST daily scores, last 90 days

FIRST EPSS held steady from 2.0% on 2026-10-07 to 2.0% on 2026-11-06, ranging 2.0%–2.0% across 31 daily scores.
2026-10-07 → 2026-11-06 · 31 days · 2.0%–2.0%
Daily values
FIRST EPSS daily scores for this CVE
Score dateEPSSPercentile
2026-11-062.0%80.6%
2026-11-052.0%80.6%
2026-11-042.0%80.6%
2026-11-032.0%80.6%
2026-11-022.0%80.6%
2026-11-012.0%80.6%
2026-10-312.0%80.6%
2026-10-302.0%80.5%
2026-10-292.0%80.5%
2026-10-282.0%80.5%
2026-10-272.0%80.4%
2026-10-262.0%80.4%
2026-10-252.0%80.4%
2026-10-242.0%80.4%
2026-10-232.0%80.4%
2026-10-222.0%80.4%
2026-10-212.0%80.4%
2026-10-202.0%80.3%
2026-10-192.0%80.3%
2026-10-182.0%80.2%
2026-10-172.0%80.2%
2026-10-162.0%80.2%
2026-10-152.0%80.2%
2026-10-142.0%80.2%
2026-10-132.0%80.0%
2026-10-122.0%80.0%
2026-10-112.0%80.0%
2026-10-102.0%80.0%
2026-10-092.0%79.9%
2026-10-082.0%79.9%
2026-10-072.0%79.9%

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Learn

Why it happened and what stops it

The weakness (CWE)

Affected products

  • microsoft windows server 2008
  • microsoft windows server 2012
  • microsoft windows server 2016
  • microsoft windows server 2019
  • microsoft windows server 2022
  • microsoft windows server 2022 23h2
  • microsoft windows server 2025

Coverage1 article

References

Facts sourced from NVD, FIRST EPSS, and CISA KEV. Last synced 2026-11-06 23:20 UTC.

  • CVSS & description: NVD 2.0, fetched 2026-11-06 23:20 UTC
  • EPSS: FIRST EPSS, fetched 2026-11-06 23:20 UTC; score date 2026-11-06
  • KEV: CISA KEV, fetched 2026-11-06 23:20 UTC