CVE-2022-37966
HighCVSS 8.1Exploitation Probability (EPSS)
High risk85th percentile - higher than 85% of all known CVEs
Summary
A vulnerability in Windows Kerberos RC4-HMAC allows elevation of privilege.
Risk Assessment
An attacker could elevate privileges in the domain, potentially leading to full system compromise.
Recommendation
Install Windows security updates and consider disabling RC4-HMAC.
Other vulnerabilities in Windows Kerberos
See all- CVE-2022-37967High
Elevation of privilege vulnerability in Windows Kerberos. It could allow an attacker to gain higher privileges in a domain.
- CVE-2026-62773High
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-62766High
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-62754High
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-62752High
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-47288High
Integer overflow or wraparound vulnerability in Windows Kerberos. Allows an authorized attacker to execute code over an adjacent network.
- CVE-2026-42914Medium
A vulnerability in Windows Kerberos allows an authorized attacker to cause a denial of service over the network via an out-of-bounds read.
- CVE-2026-42903Medium
A null pointer dereference vulnerability in Windows Kerberos allows an authorized attacker to perform a Denial of Service (DoS) attack over a network.
- CVE-2026-20849High
Vulnerability in Windows Kerberos relies on untrusted inputs in a security decision. This allows an authorized attacker to elevate privileges over a network.
- CVE-2024-38239High
A vulnerability in Windows Kerberos allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

