CVE-2026-69640
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
Risk Assessment
An attacker with valid credentials could remotely bypass security mechanisms, potentially leading to unauthorized access to domain resources.
Recommendation
Immediately install Windows security updates and verify Kerberos service configuration.
Other vulnerabilities in Windows Key Distribution Center
See all- CVE-2026-69650High
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-84001High
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
- CVE-2026-69712High
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
- CVE-2021-33764Medium
Information disclosure vulnerability in Windows Key Distribution Center (KDC). An attacker could exploit this flaw to obtain information that should be protected.
Original NVD description (English source)
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS