CVE-2016-0049

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold…

published February 10, 2016

CVSS

—

EPSS

13%

Percentile

96.3

In the wild

Unconfirmed

What it is

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate password changes, which allows remote attackers to bypass authentication by deploying a crafted Key Distribution Center (KDC) and then performing a sign-in action, aka "Windows Kerberos Security Feature Bypass."

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13068 · 96.3th percentile
Published: 2016-02-10T11:00Z

EPSS history

Timeline

10 FEB 11:00Z
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold…
cvelistv5