CVE-2026-122164

HighCVSS 8.0/10Last modified Nov 11, 2026

Description

Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-1390

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1221657.8Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.CVE-2026-1221667.8Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.CVE-2026-1221676.8Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1221687.8Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.CVE-2026-1221697.5Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.CVE-2026-122177.8A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of tCVE-2026-1221707.0Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-1221718.8Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.CVE-2026-1221727.8Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.CVE-2026-1221736.8Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1221747.0Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privilegesCVE-2026-1221757.0Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-122164: High severity, CVSS 8.0 | Vulnix