{"id":"CVE-2026-119940","kind":"vulnerability","aliases":["CVE-2026-119940"],"related":[],"title":"Windows Kerberos: integer overflow lets an authorized attacker crash services over network","description":"Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network.","summary":"Windows Kerberos has an integer overflow or wraparound bug that an authorized user can trigger over the network. The result is denial of service, meaning the Kerberos component can be made to fail.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["active-directory","infrastructure","kerberos","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:16+00:00","first_seen_at":"2026-11-10T19:25:04+00:00","triaged_at":"2026-11-10T19:56:26+00:00","updated_at":"2026-11-10T19:56:26+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:56:26Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"Windows Kerberos: integer overflow lets an authorized attacker crash services over network","impact":"low","summary":"Windows Kerberos has an integer overflow or wraparound bug that an authorized user can trigger over the network. The result is denial of service, meaning the Kerberos component can be made to fail.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","kerberos","active-directory"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"Kerberos authentication service crashes, denying service to network clients","analyst_note":"Find the Microsoft advisory for CVE-2026-119940 to confirm affected Windows versions, fixed builds and any mitigation.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Windows domain controllers or Windows machines that use Kerberos for authentication are the ones to look at. The sources do not say which Windows builds are affected or which configurations expose the flaw. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000664,"input_tokens":4489,"output_tokens":430,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119940':15A,18A '-2026':14A,17A 'activ':20B 'active-directori':19B 'allow':65C 'attack':8A,68C 'author':7A,36B,67C 'bug':33B 'compon':52B 'crash':9A 'cve':13A,16A 'deni':70C 'denial':46B 'directori':21B 'fail':57B 'infrastructur':22B 'integ':3A,29B,58C 'kerbero':2A,23B,26B,51B,64C 'let':5A 'made':55B 'mean':49B 'network':12A,42B,74C 'overflow':4A,30B,59C 'result':44B 'servic':10A,48B,71C 'trigger':39B 'user':37B 'window':1A,24B,25B,63C 'wraparound':32B,61C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Windows domain controllers or Windows machines that use Kerberos for authentication are the ones to look at. The sources do not say which Windows builds are affected or which configurations expose the flaw. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["activedirectory","infrastructure","kerberos","medium","windows"],"campaign_type":null,"search_a":"'-119940':15A,18A '-2026':14A,17A 'attack':8A 'author':7A 'crash':9A 'cve':13A,16A 'integ':3A 'kerbero':2A 'let':5A 'network':12A 'overflow':4A 'servic':10A 'window':1A","search_b":"'activ':20B 'active-directori':19B 'author':36B 'bug':33B 'compon':52B 'denial':46B 'directori':21B 'fail':57B 'infrastructur':22B 'integ':29B 'kerbero':23B,26B,51B 'made':55B 'mean':49B 'network':42B 'overflow':30B 'result':44B 'servic':48B 'trigger':39B 'user':37B 'window':24B,25B 'wraparound':32B","search_c":"'allow':65C 'attack':68C 'author':67C 'deni':70C 'integ':58C 'kerbero':64C 'network':74C 'overflow':59C 'servic':71C 'window':63C 'wraparound':61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:16+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119940","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119940","severity":null,"published_at":"2026-11-10T19:20:16+00:00","modified_at":"2026-11-10T19:20:16+00:00","first_seen_at":"2026-11-10T19:25:04+00:00","fetched_at":"2026-11-10T19:25:04+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}