1. Home
  2. CVE Database
  3. CVE-2026-47288
HIGH · 7.1

CVE-2026-47288

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

Vulnerability Description

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MicrosoftWindows Server 2012-
MicrosoftWindows Server 2016< 10.0.14393.9234
MicrosoftWindows Server 2019< 10.0.17763.8880
MicrosoftWindows Server 2022< 10.0.20348.5256
MicrosoftWindows Server 2025< 10.0.26100.32995

Related Weaknesses (CWE)

CWE-190

References

FAQ

What is CVE-2026-47288?

CVE-2026-47288 is a vulnerability with a CVSS score of 7.1 (HIGH). Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

How severe is CVE-2026-47288?

CVE-2026-47288 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-47288?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Windows Server 2025.