Windows Kerberos Elevation of Privilege Vulnerability

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

How could an attacker exploit this vulnerability?
An unauthenticated attacker could perform a man-in-the-middle network exploit to downgrade a client's encryption to the RC4-md4 cypher, followed by cracking the user's cypher key. The attacker could then compromise the user's Kerberos session key to elevate privileges.

Security updates
10.0.17763.3406 — https://support.microsoft.com/help/5017315
10.0.20348.1006 — https://support.microsoft.com/help/5017316
10.0.20348.916 — https://support.microsoft.com/help/5017392
10.0.14393.5356 — https://support.microsoft.com/help/5017305
6.0.6003.21666 — https://support.microsoft.com/help/5017358
6.0.6003.21666 — https://support.microsoft.com/help/5017371
6.1.7601.26115 — https://support.microsoft.com/help/5017361
6.1.7601.26115 — https://support.microsoft.com/help/5017373
6.2.9200.23865 — https://support.microsoft.com/help/5017370
6.2.9200.23865 — https://support.microsoft.com/help/5017377
6.3.9600.20571 — https://support.microsoft.com/help/5017367
6.3.9600.20571 — https://support.microsoft.com/help/5017365