← Database

CVE-2026-27912

HIGH CVSS: 8.0 Published: 2026-04-14 Modified: 2026-06-17

Description

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2022Microsoft Windows Server 2012Microsoft Windows Server 2025Microsoft Windows Server 2022 23H2

Weakness Type

CWE-285

References