CVE-2026-27912
Windows Kerberos Elevation of Privilege Vulnerability
HIGH 8.0EPSS 0.4%
Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.
- Affected
- Microsoft · Windows Server 2012 · Windows Server 2012 (Server Core installation) · Windows Server 2012 R2 · Windows Server 2012 R2 (Server Core installation) · Windows Server 2016 · Windows Server 2016 (Server Core installation)
- CVSS v3.1 MICROSOFT
- 8.0 HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.43% chance of exploitation in the next 30 days, 36th percentile
- Published
- 2026-04-14
- Updated
- 2026-10-15
Proof-of-concept exploits (5)
- Semperis-Community/ResetNightmare222★ · 2026-08-20
- mihat2/ResetNightmare-impacket15★ · 2026-08-11
- oxstussz-eng/Kerberos-CVE-2026-279124★ · 2026-08-14
- XedSama/ResetNightmare-Python14★ · 2026-08-06
- kdRajKit/ResetNightmare-C-code-POC2★ · 2026-08-21