CVE-2026-108132

CVE-2026-108132 · Windows Kerberos Elevation of Privilege Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVSS 7.0 · High · EPSS 0.3% · Fix available

Affected products and versions

windows 10 version 1607
Versions
- ≥ 10.0.14393.0, < 10.0.14393.9612: Affected (custom)
Update to 10.0.14393.9612
windows 10 version 1809
Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows 10 version 21h2
Versions
- ≥ 10.0.19044.0, < 10.0.19044.7807: Affected (custom)
Update to 10.0.19044.7807
windows 10 version 22h2
Versions
- ≥ 10.0.19045.0, < 10.0.19045.7807: Affected (custom)
Update to 10.0.19045.7807
windows 11 version 23h2
Versions
- ≥ 10.0.22631.0, < 10.0.22631.7652: Affected (custom)
Update to 10.0.22631.7652
windows server 2016
Versions
- ≥ 10.0.14393.0, < 10.0.14393.9612: Affected (custom)
Update to 10.0.14393.9612
windows server 2016 (server core installation)
Versions
- ≥ 10.0.14393.0, < 10.0.14393.9612: Affected (custom)
Update to 10.0.14393.9612
windows server 2019
Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows server 2019 (server core installation)
Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows server 2022
Versions
- ≥ 10.0.20348.0, < 10.0.20348.5761: Affected (custom)
Update to 10.0.20348.5761
windows server 2025
Versions
- ≥ 10.0.26100.0, < 10.0.26100.33650: Affected (custom)
Update to 10.0.26100.33650
windows server 2025 (server core installation)
Versions
- ≥ 10.0.26100.0, < 10.0.26100.33650: Affected (custom)
Update to 10.0.26100.33650