8391 matches found
EUVD-2026-56935
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...
CVE-2026-62773
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-62766
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-62754
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-62752
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-62752 Windows Kerberos Elevation of Privilege Vulnerability
...
EUVD-2026-56653
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-62752 Windows Kerberos Elevation of Privilege Vulnerability
...
CVE-2026-62752
CVE-2026-62752 is a Windows Kerberos heap-based buffer overflow that allows an authorized attacker to elevate privileges locally. The description confirms a local, low-attack-complexity path with high impact to confidentiality, integrity, and availability. No specific exploit details or versions/...
CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability
...
CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability
...
CVE-2026-62766
CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...
CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability
...
CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability
...
CVE-2026-62773
CVE-2026-62773 describes a use-after-free vulnerability in Windows Kerberos that enables a locally authenticated attacker to elevate privileges. The flaw is triggered in the Kerberos subsystem and, when exploited, could allow elevation of rights with high impact on confidentiality, integrity, and...
EUVD-2026-56377
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
EUVD-2026-56378
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability
...