Microsoft Windows Kerberos Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Kerberos authentication protocol of Microsoft Windows. This issue arises from an insufficient resource pool, which allows an unauthorized attacker to disrupt service over the network. The vulnerability affects multiple versions of Windows Server, including 2012, 2016, 2019, 2022, and 2025, as well as Windows Server 2012 R2.

Impact

Exploitation of this vulnerability leads to a significant disruption of service, causing a denial-of-service condition on the affected system.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5055519, KB5055521, KB5055523, KB5055526, KB5055557, and KB5055581.