CVE-2026-40355

HighCVSS 7.5/10Last modified Oct 15, 2026

Description

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Apr 28, 2026
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-403567.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accepCVE-2026-403578.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-403588.4Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-403597.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-40366.5An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStationCVE-2026-403607.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-403618.4Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-403627.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-403638.4Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-403648.4Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code localCVE-2026-403658.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-403668.4Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code local
CVE-2026-40355: High severity, CVSS 7.5 | Vulnix