CyberICT

CVE-2026-27912

Microsoft · Published April 14, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Windows Kerberos Elevation of Privilege Vulnerability. Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

Affected Products

  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C