Skip to content
OpenAdvisories
Critical MSRC-CVE-2025-49735 1 CVE

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

Published Jul 8, 2025 · Updated Jul 17, 2025 · Revision 4

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

Are all Windows Servers affected by this vulnerability?
This vulnerability only affects Windows Servers that are configured as a [MS-KKDCP]: Kerberos Key Distribution Center (KDC) Proxy Protocol server. Domain controllers are not affected.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

How could an attacker exploit this vulnerability?
An unauthenticated attacker could use a specially crafted application to leverage a cryptographic protocol vulnerability in Kerberos Key Distribution Center Proxy Service to perform remote code execution against the target.

Security updates
10.0.17763.7434 — https://support.microsoft.com/help/5060531
10.0.20348.3807 — https://support.microsoft.com/help/5060526
10.0.26200.4349 — https://support.microsoft.com/help/5060842
10.0.25398.1665 — https://support.microsoft.com/help/5060118
10.0.14393.8148 — https://support.microsoft.com/help/5061010
6.2.9200.25522 — https://support.microsoft.com/help/5061059
6.3.9600.22620 — https://support.microsoft.com/help/5061018

Vulnerabilities 1

Revision history

  1. #4

    Corrected Download and Article links in the Security Updates table. This is an informational change only.

  2. #3

    Corrected Download and Article links in the Security Updates table. This is an informational change only.

  3. #2

    Information published. This CVE was addressed by updates that were released in June 2025, but the CVE was inadvertently omitted from the June 2025 Security Updates. This is an informational change only. Customers who have already installed the June 2025 updates do not need to take any further action.

  4. #1

    Information published.

References