---
id: "CVE-2026-119940"
page: "https://infrastack.ai/live/CVE-2026-119940"
kind: "vulnerability"
aliases: ["CVE-2026-119940"]
title: "Windows Kerberos: integer overflow lets an authorized attacker crash services over network"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["active-directory", "infrastructure", "kerberos", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:20:16+00:00"
first_seen_at: "2026-11-10T19:25:04+00:00"
updated_at: "2026-11-10T19:56:26+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119940", "first_seen_at": "2026-11-10T19:25:04+00:00"}]
exploit_sources: []
---

# Windows Kerberos: integer overflow lets an authorized attacker crash services over network

Link for people: https://infrastack.ai/live/CVE-2026-119940 (this .md is for agents)

Windows Kerberos has an integer overflow or wraparound bug that an authorized user can trigger over the network. The result is denial of service, meaning the Kerberos component can be made to fail.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119940

## From the sources

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_