CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2026-62773

CVE-2026-62773 describes a use-after-free vulnerability in Windows Kerberos that enables a locally authenticated attacker to elevate privileges. The flaw is triggered in the Kerberos subsystem and, when exploited, could allow elevation of rights with high impact on confidentiality, integrity, and...

CVE-2026-62766

CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...

EUVD-2026-56377

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

EUVD-2026-56378

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

...

EUVD-2026-56373

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-62754

CVE-2026-62754 describes a heap-based buffer overflow in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation. The flaw is triggered within the Kerberos-related code path, enabling elevation of privileges on the affected system. The available documents confirm...

CVE-2026-72745

A flaw was found in FreeRDP. A malicious peer, either a server or client, can exploit an out-of-bounds vulnerability during CredSSP/NLA authentication. By supplying a large 'extra count' EC value in a Kerberos GSS Wrap token, an attacker can cause the decryption operation to access memory outside...

Windows Kerberos Elevation of Privilege Vulnerability

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-72745

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73242...

CVE-2026-72745

CVE-2026-72745 is a duplicate of CVE-2026-73242 for FreeRDP. Technical details in connected docs describe an out-of-bounds vulnerability in kerberos_DecryptMessage() within winpr/libwinpr/sspi/Kerberos/kerberos.c, where a peer-supplied 16-bit EC (extra count) in a GSS Wrap token can move decrypt ...

CVE-2026-72745

...

EUVD-2026-56135

FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberosDecryptMessage winpr/libwinpr/sspi/Kerberos/kerberos.c. The 16-bit EC extra count field of a peer-supplied GSS Wrap token RFC 4121 is used directly in pointer arithmetic to locate the encrypted regions without being...