CVE-2014-6324

No fix known ExploitedEPSS 87%CVSS 8.8

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."

Published 2014-11-18 · In CISA KEV since 2022-03-25 · CVE record · OSV

Products: microsoft windows_7, microsoft windows_8, microsoft windows_8.1, microsoft windows_server_2003, microsoft windows_server_2008, microsoft windows_server_2012