Microsoft Windows Kerberos Null Pointer Dereference Vulnerability Leading to Denial of Service

A null pointer dereference vulnerability has been identified in Windows Kerberos, allowing an authorized attacker to cause a denial of service over the network. This vulnerability affects multiple Windows products, including various versions of Windows Server, Windows 10, and Windows 11. The issue arises from improper handling of null pointers, which can be exploited to disrupt service availability.

Impact

Exploitation of this vulnerability leads to a denial of service, causing affected systems to become unresponsive or unavailable.

Remediation

Users can apply the security update for this vulnerability, which is included in the June 2026 Monthly Rollup, available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094041, KB5094042, KB5094122, KB5095051, KB5094126, KB5093998, KB5094127, and KB5094123.