CVE Catalog

CVE-2026-20849

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.97%

59th percentile - higher than 59% of all known CVEs

Summary

Vulnerability in Windows Kerberos relies on untrusted inputs in a security decision. This allows an authorized attacker to elevate privileges over a network.

Risk Assessment

An authorized user can escalate privileges, potentially leading to system compromise or access to sensitive data.

Recommendation

Install the latest security updates from Microsoft for Windows Kerberos. Limit trust in network authentication requests.

Other vulnerabilities in Windows Kerberos

See all
Original NVD description (English source)

Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS