PULSE
LIVE17signals / 24h
FEED
ransomspacebears reclama a Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano · IT · Agriculture and Food Productionransomgenesis reclama a **E*** · US · Not Foundransomorova reclama a Ganzhou Xinye Craft Co., Ltd. · HK · Manufacturingransompanzer reclama a Xpress Tech · Technologyransomqilin reclama a G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L · IT · Transportationransomqilin reclama a Crown Group · PK · Otherransomdragonforce reclama a QPC Global · GB · Otherransominterlock reclama a AngMar Companies · Not Foundransompayload reclama a B&B Hydraulik · DE · Manufacturingransompayload reclama a Stücheli Architekten · CH · Professional Servicesransompayload reclama a Baya Technologies · Technologyransomkrybit reclama a www.kilpi-koskinen.fi · FI · Otherransomkrybit reclama a www.apsanet.com.ar · AR · Professional Servicesransomqilin reclama a Service Evaluation Concepts · US · Professional Servicesransomspacebears reclama a Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano · IT · Agriculture and Food Productionransomgenesis reclama a **E*** · US · Not Foundransomorova reclama a Ganzhou Xinye Craft Co., Ltd. · HK · Manufacturingransompanzer reclama a Xpress Tech · Technologyransomqilin reclama a G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L · IT · Transportationransomqilin reclama a Crown Group · PK · Otherransomdragonforce reclama a QPC Global · GB · Otherransominterlock reclama a AngMar Companies · Not Foundransompayload reclama a B&B Hydraulik · DE · Manufacturingransompayload reclama a Stücheli Architekten · CH · Professional Servicesransompayload reclama a Baya Technologies · Technologyransomkrybit reclama a www.kilpi-koskinen.fi · FI · Otherransomkrybit reclama a www.apsanet.com.ar · AR · Professional Servicesransomqilin reclama a Service Evaluation Concepts · US · Professional Services
← All CVEs
CVE WatchAug 11, 2026

CVE-2026-62752

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVSS

7.8

High

EPSS

KEV

Exploit Today

0-100

Published: Aug 11, 2026 · Last modified: Aug 11, 2026 · CWE-122

EPSS · 30d

Not enough EPSS history yet.

Technical description

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP peer to trigger out-of-bounds reads and in-place writes during CredSSP/NLA Kerberos decryption. This issue is fixed in version 3.30.0.7h
CVE-2026-713318.1 HIG
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.8h
CVE-2026-703477.8 HIG
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.5h
CVE-2026-703457.8 HIG
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.5h
CVE-2026-703306.7 MED
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.5h
CVE-2026-703046.7 MED
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.5h