CVE-2026-69650
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could forge tokens or tickets, leading to privilege escalation and compromise of authentication integrity.
Recommendation
Install the latest security updates from Microsoft for Windows Key Distribution Center.
Other vulnerabilities in Windows Key Distribution Center
See all- CVE-2026-69640Medium
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
- CVE-2026-84001High
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
- CVE-2026-69712High
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
- CVE-2021-33764Medium
Information disclosure vulnerability in Windows Key Distribution Center (KDC). An attacker could exploit this flaw to obtain information that should be protected.
Original NVD description (English source)
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS