Live › vulnerability › CVE-2014-6324
Go to dashboardMicrosoft's Kerberos Key Distribution Center (the domain authentication service on Windows domain controllers) has a flaw that lets any authenticated domain user escalate to domain administrator. This is a known exploited vulnerability listed by CISA.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Kerberos Key Distribution Center (KDC) | vendor | – | – |
Unknown from the sources.
Apply the Microsoft security update for CVE-2014-6324 on all domain controllers, per vendor instructions (CISA required action).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2014-6324")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.