Windows Kerberos Elevation of Privilege Vulnerability

A user with basic access to a Windows system could exploit this to gain administrative privileges, potentially allowing them to modify system settings, access sensitive data, or interfere with industrial control software running on that system.

IT administrators managing Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems. OT environments running SCADA software, HMI systems, or data acquisition tools on Windows systems are at risk if users have local account access and could be compromised to gain administrative control of engineering workstations or operator terminals.

An attacker with a valid user account on a Windows system can trigger an integer underflow in Kerberos authentication processing to escalate their privileges from standard user to administrator without requiring additional credentials or user interaction.