CVE-2026-69744: Windows Kerberos Denial of Service Vulnerability
Published Sep 8, 2026
·Updated
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
Other sources
Windows Kerberos Denial of Service Vulnerability
— Microsoft
Affected Software
6 affected componentsFixes available
Microsoft Windows 11=24H2
10.0.26100.9445
Microsoft Windows 11=25H2
10.0.26200.9445
Microsoft Windows 11=24H2
10.0.26100.9445
Microsoft Windows 11=25H2
10.0.26200.9445
Microsoft Windows Server 2025<10.0.26100.33438
10.0.26100.33438
Microsoft Windows Server 2025<10.0.26100.33438
10.0.26100.33438
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9445Patch KB5124008 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9445Patch KB5124008 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33438Patch KB5122871
Event History
Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:12 PM
Data Sourced
via MITRE·05:12 PM
DescriptionSeverity
Data Sourced
via NVD·06:19 PM
DescriptionSeverityWeakness