Skip to main content

CVE-2026-47288

Windows Kerberos Key Distribution Center (KDC) Remote Code Execution vulnerability

Microsoft

MSRC advisory June 9, 2026

Alert details

Source feed
Microsoft MSRC
CVE ID
CVE-2026-47288
Affected products
Windows Kerberos Key Distribution Center (KDC) Remote Code Execution · Microsoft Windows Kerberos Key Distribution Center (KDC) Remote Code Execution · Microsoft

What happened

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

What it means for your business

Windows Kerberos Key Distribution Center (KDC) Remote Code Execution vulnerability (CVE-2026-47288) was added to Microsoft’s security update guidance. Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network. If you need help checking exposure, call (864) 335-9223.

Sources

Related briefs

Microsoft MSRC

CVE-2026-68801

Microsoft Excel Remote Code Execution vulnerability

Microsoft Excel Remote Code Execution vulnerability (CVE-2026-68801) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64903

Microsoft Office Remote Code Execution vulnerability

Microsoft Office Remote Code Execution vulnerability (CVE-2026-64903) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64899

Microsoft Office Information Disclosure vulnerability

Microsoft Office Information Disclosure vulnerability (CVE-2026-64899) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-58547

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege vulnerability

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege vulnerability (CVE-2026-58547) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.