GCVE-110-NCSC-2026-472

Advisory PublishedCVSS 9.0/10

Vulnetix · Advisory published November 10, 2026

An authentication bypass vulnerability in Windows Kerberos enables unauthorized attackers to elevate privileges over a network by exploiting alternate paths or channels.

Download JSON Look up in the Resolve Platform

Weaknesses (CWE)

CWE-288Authentication Bypass Using an Alternate Path or ChannelCWE-415Double FreeCWE-763Release of Invalid Pointer or ReferenceCWE-125Out-of-bounds ReadCWE-121Stack-based Buffer OverflowCWE-416Use After FreeCWE-190Integer Overflow or WraparoundCWE-122Heap-based Buffer OverflowCWE-787Out-of-bounds Write

Risk Scores

CVSS 3.1

9.0/10

Critical · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

Aliases

CVE-2026-112967 CVE-2026-116928 CVE-2026-119958 CVE-2026-85844 CVE-2026-88218 CVE-2026-88234 CVE-2026-88243 CVE-2026-95882 CVE-2026-95901 CVE-2026-95962 CVE-2026-96067 CVE-2026-96078 CVE-2026-96157

References

advisory

Browse GCVE Records

851 records in the GCVE database · Updated November 12, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Look up in the Resolve Platform Download JSON