8391 matches found
CVE-2026-78620
CVE-2026-78620 affects the Okta Access Gateway , specifically its Kerberos configuration handler , which fails to validate file paths supplied in event payloads before writing file contents. Because the attacker-controlled path is used directly as the write destination, files can be written to un...
EUVD-2026-74178
The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance...
CVE-2026-69822
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69760
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69744
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69685
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69676
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...
EUVD-2026-73623
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69760
Windows Kerberos is affected by an out-of-bounds read vulnerability that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The vulnerability is rated CVSS 7.5 (HIGH) with a low attack complexity and no user interaction required. CISA's SSVC assessme...
CVE-2026-69685
Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...
EUVD-2026-73573
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69676
CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...
EUVD-2026-73071
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...
EUVD-2026-73065
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69822
CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...
EUVD-2026-73054
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69744
Windows Kerberos is affected by a null pointer dereference that allows an unauthenticated attacker to trigger a denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) , with the vector indicating low attack complexity, no privileges required, and no user interaction. The primary impa...
Windows Kerberos Elevation of Privilege Vulnerability
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...