Microsoft Windows Kerberos Improper Authorization Vulnerability Allowing Privilege Elevation

A vulnerability exists in Windows Kerberos due to improper authorization, which allows an authorized attacker to elevate privileges over an adjacent network. This issue affects multiple versions of Windows Server, including 2012 R2, 2016, 2019, 2022, and 2025, as well as Windows Server 2022 23H2 Edition.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege elevation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082126, KB5082127, KB5082198, KB5082063, KB5082142, and KB5082123.