CVE-2026-83720: Windows Kerberos Elevation of Privilege Vulnerability
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Other sources
Windows Kerberos Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3231Patch KB5127646
Event History
Frequently Asked Questions
What level of access is required to exploit this issue?
An attacker needs local access and low-level privileges on the affected system. The available data does not indicate that user interaction is required.
Is this primarily a remote attack risk?
No. The attack vector is local, so exposure is centered on systems where an attacker can run code or otherwise obtain local access.
What could successful exploitation allow?
Successful exploitation could allow elevation of privilege and has high assessed impact on confidentiality, integrity, and availability.
Which affected software is identified?
The affected software listed is Microsoft Windows 11 and Microsoft Windows Kerberos.