CVE-2022-24545
HighCVSS 8.1Exploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
Windows Kerberos Remote Code Execution Vulnerability
Risk Assessment
An attacker can remotely execute arbitrary code on a Windows system, potentially leading to full domain or host compromise. This poses a critical threat to infrastructure security.
Recommendation
Immediately install Microsoft security updates for Windows. Monitor systems for unusual Kerberos-related activity.
Other vulnerabilities in Windows Kerberos
See all- CVE-2026-83720High
A use after free vulnerability in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-70241High
Use after free vulnerability in Windows Kerberos. An authorized attacker can exploit it to elevate privileges locally.
- CVE-2022-37967High
Elevation of privilege vulnerability in Windows Kerberos. It could allow an attacker to gain higher privileges in a domain.
- CVE-2026-69822High
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-69760High
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
- CVE-2026-69744High
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
- CVE-2026-69685High
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-69676High
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
- CVE-2026-62773High
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-62766High
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows Kerberos Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS