Windows Kerberos Elevation of Privilege Vulnerability

Timeline

Detection, updates, and resolution for this record.

1. Oct 13, 2026 · CIRCL Vulnerability Lookup

   Detected

   Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

2. Oct 14, 2026 · CIRCL Vulnerability Lookup

   Updated

   Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Affected

• vendor Microsoft Windows 10 Version 1607version unspecified
• vendor Microsoft Windows 10 Version 1809version unspecified
• vendor Microsoft Windows 10 Version 21H2version unspecified
• vendor Microsoft Windows 10 Version 22H2version unspecified
• vendor Microsoft Windows 11 Version 23H2version unspecified
• vendor Microsoft Windows 11 version 23H2version unspecified
• vendor Microsoft Windows Server 2016version unspecified
• vendor Microsoft Windows Server 2016 (Server Core installation)version unspecified

Sources

• CIRCL Vulnerability LookupCVE-2026-108132

  Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

  vulnerability.circl.lu
• CVE.orgCVE-2026-108132

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2026-108132

  30-day exploitation probability 0.3%

  first.org

References

• Windows Kerberos Elevation of Privilege Vulnerability · msrc.microsoft.com