Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

Windows Kerberos Remote Code Execution Vulnerability

CVE-2022-24545 · published 4 years ago
Summary

Windows Kerberos Remote Code Execution Vulnerability

What to do
  • Update microsoft windows 10 version 1809 to version 10.0.17763.2803 or later.
  • Update microsoft windows server 2019 to version 10.0.17763.2803 or later.
  • Update microsoft windows server 2019 (server core installation) to version 10.0.17763.2803 or later.
  • Update microsoft windows 10 version 1909 to version 10.0.18363.2212 or later.
  • Update microsoft windows 10 version 21h1 to version 10.0.19043.1645 or later.
  • Update microsoft windows server 2022 to version 10.0.20348.643 or later.
  • Update microsoft windows 10 version 20h2 to version 10.0.19042.1645 or later.
  • Update microsoft windows server version 20h2 to version 10.0.19042.1645 or later.
  • Update microsoft windows 11 version 21h2 to version 10.0.22000.613 or later.
  • Update microsoft windows 10 version 21h2 to version 10.0.19044.1645 or later.
  • Update microsoft windows 10 version 1607 to version 10.0.14393.5066 or later.
  • Update microsoft windows server 2016 to version 10.0.14393.5066 or later.
  • Update microsoft windows server 2016 (server core installation) to version 10.0.14393.5066 or later.
Affected software
VendorProductAffected versions
microsoft windows_10 20h2
21h1
21h2
1607
1809
1909
cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*
microsoft windows_11 All versions
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*
microsoft windows_server_2016 20h2
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
microsoft windows_server_2019 All versions
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
microsoft windows_server_2022 All versions
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
microsoft windows 10 version 1809 < 10.0.17763.2803
microsoft windows server 2019 < 10.0.17763.2803
microsoft windows server 2019 (server core installation) < 10.0.17763.2803
microsoft windows 10 version 1909 < 10.0.18363.2212
microsoft windows 10 version 21h1 < 10.0.19043.1645
microsoft windows server 2022 < 10.0.20348.643
microsoft windows 10 version 20h2 < 10.0.19042.1645
microsoft windows server version 20h2 < 10.0.19042.1645
microsoft windows 11 version 21h2 < 10.0.22000.613
microsoft windows 10 version 21h2 < 10.0.19044.1645
microsoft windows 10 version 1607 < 10.0.14393.5066
microsoft windows server 2016 < 10.0.14393.5066
microsoft windows server 2016 (server core installation) < 10.0.14393.5066
Original advisory text
Windows Kerberos Remote Code Execution Vulnerability
Windows Kerberos Remote Code Execution Vulnerability
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
8.1 High
Exploitation
2% chance of attack within 30 days
Timeline
Published15 Apr 2022
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2022-24545 · NVD
CVE-2022-24545 · MITRE
Track software like this
Free during beta