CVE-2026-62766HighCVSS 7.0
Windows Kerberos Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
🎯 Affected products8
- Windows 11 Version 24H2 for ARM64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
- Windows 11 Version 25H2 for ARM64-based Systems
- Windows 11 Version 25H2 for x64-based Systems
- Windows 11 Version 26H1 for ARM64-based Systems
- Windows 11 version 26H1 for x64-based Systems
- Windows Server 2025
- Windows Server 2025 (Server Core installation)
✅ Remediation
KB5120233 (Security Update) — fixed build 10.0.26100.33296 KB5120228 (Security Hotpatch Update) — fixed build 10.0.26100.33222 KB5121003 (Security Update) — fixed build 10.0.26200.9168 KB5120994 (Security Hotpatch Update) — fixed build 10.0.26200.9106 KB5121003 (Security Update) — fixed build 10.0.26100.9168 KB5120994 (Security Hotpatch Update) — fixed build 10.0.26100.9106 KB5121000 (Security Update) — fixed build 10.0.28000.2704
🔗 References (11)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62766
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233
- referencehttps://support.microsoft.com/help/5120233
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228
- referencehttps://support.microsoft.com/help/5120228
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003
- referencehttps://support.microsoft.com/help/5121003
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994
- referencehttps://support.microsoft.com/help/5120994
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000
- referencehttps://support.microsoft.com/help/5121000