U.S. Flag Official website of the Department of Homeland Security

Microsoft Releases Out-of-Band Security Bulletin for Windows Kerberos Vulnerability

Original release date: November 18, 2014 | Last revised: November 19, 2014

Microsoft has released security updates to address a remote elevation of privilege vulnerability which exists in implementations of Kerberos KDC in Microsoft Windows. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system.

US-CERT encourages users and administrators to review Microsoft Security Bulletin MS14-068 and Vulnerability Note VU#213119 for additional details, and apply the necessary updates.

This product is provided subject to this Notification and this Privacy & Use policy.

Was this document helpful?  Yes  |  Somewhat  |  No

Back to Top