Skip to content
OpenAdvisories
High MSRC-CVE-2024-26248 1 CVE

Windows Kerberos Elevation of Privilege Vulnerability

Published Apr 9, 2024 · Updated Apr 9, 2024

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment of the targeted component.

What privileges could be gained by an attacker who successfully exploited the vulnerability?
A domain user could use this vulnerability to elevate privileges to SYSTEM assigned integrity level.

Where can I find more information about what steps I need to take to be fully protected from this vulnerability?
The updates released on or after April 9, 2024 will NOT fully address the security issues in this vulnerability. For more information about how to manage PAC validation changes related to this CVE and the steps you need to take to be fully protected, see How to manage PAC Validation changes related to CVE-2024-26248 and CVE-2024-29056.

Security updates
10.0.17763.5696 — https://support.microsoft.com/help/5036896
10.0.20348.2402 — https://support.microsoft.com/help/5036909
10.0.22000.2899 — https://support.microsoft.com/help/5036894
10.0.19044.4291 — https://support.microsoft.com/help/5036892
10.0.22621.3447 — https://support.microsoft.com/help/5036893
10.0.25398.830 — https://support.microsoft.com/help/5036910
10.0.10240.20596 — https://support.microsoft.com/help/5036925
10.0.14393.6897 — https://support.microsoft.com/help/5036899
6.0.6003.22618 — https://support.microsoft.com/help/5036932
6.0.6003.22618 — https://support.microsoft.com/help/5036950
6.1.7601.27067 — https://support.microsoft.com/help/5036967
6.1.7601.27067 — https://support.microsoft.com/help/5036922
6.2.9200.24821 — https://support.microsoft.com/help/5036969
6.3.9600.21924 — https://support.microsoft.com/help/5036960

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References