NetSight
medium6.5

CVE-2026-24297

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a sec…

Impact

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1607
before 10.0.14393.8957
MicrosoftWindows 10 1809
before 10.0.17763.8511
MicrosoftWindows 10 21h2
before 10.0.19044.7058
MicrosoftWindows 10 22h2
before 10.0.19045.7058
MicrosoftWindows Server 2012
All versions
Version r2
MicrosoftWindows Server 2016
before 10.0.14393.8957
MicrosoftWindows Server 2019
before 10.0.17763.8511

Weakness classification

References