Known Vulnerabilities for Kerberos 5 by MIT
Listed below are 10 of the newest known vulnerabilities associated with "Kerberos 5" by "MIT".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-40356 json | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application ... | Not Provided | 2026-04-28 | 2026-04-28 |
| CVE-2026-40355 json | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_contex... | Not Provided | 2026-04-28 | 2026-04-28 |
| CVE-2026-35337 json | Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: before 2.8.6. Description: When proces... | Not Provided | 2026-04-13 | 2026-04-14 |
| CVE-2026-33995 json | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerb... | Not Provided | 2026-03-30 | 2026-03-30 |
| CVE-2026-31392 json | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option Custom... | Not Provided | 2026-04-03 | 2026-04-27 |
| CVE-2026-27912 json | Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2025-59089 json | If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery), th... | Not Provided | 2025-11-12 | 2026-04-20 |
| CVE-2025-37924 json | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Se... | Not Provided | 2025-05-20 | 2026-04-02 |
| CVE-2023-39975 json | kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user... | 8.8 - HIGH | 2023-08-16 | 2024-02-01 |
| CVE-2023-36054 json | lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. ... | 6.5 - MEDIUM | 2023-08-07 | 2023-11-15 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mit | Kerberos 5 | 16.3 | |||
| Application | Mit | Kerberos 5 | 1.9.5 | |||
| Application | Mit | Kerberos 5 | 1.9.4 | |||
| Application | Mit | Kerberos 5 | 1.9.3 | |||
| Application | Mit | Kerberos 5 | 1.9.2 | |||
| Application | Mit | Kerberos 5 | 1.9.1 | |||
| Application | Mit | Kerberos 5 | 1.9 | |||
| Application | Mit | Kerberos 5 | 1.8.6 | |||
| Application | Mit | Kerberos 5 | 1.8.5 | |||
| Application | Mit | Kerberos 5 | 1.8.4 | |||
| Application | Mit | Kerberos 5 | 1.8.3 | |||
| Application | Mit | Kerberos 5 | 1.8.2 | |||
| Application | Mit | Kerberos 5 | 1.8.1 | |||
| Application | Mit | Kerberos 5 | 1.8 | |||
| Application | Mit | Kerberos 5 | 1.7.2 | |||
| Application | Mit | Kerberos 5 | 1.7.1 | |||
| Application | Mit | Kerberos 5 | 1.7 | |||
| Application | Mit | Kerberos 5 | 1.6.3 | |||
| Application | Mit | Kerberos 5 | 1.6.2 | |||
| Application | Mit | Kerberos 5 | 1.6.1 |