Nov 2026: Windows Kerberos Elevation of Privilege Vulnerability
CVE-2026-85844 Published on November 10, 2026
Windows Kerberos Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
YES
Technical Impact:
TOTAL
Weakness Type
Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
Products Associated with CVE-2026-85844
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
