{"id":"CVE-2014-6324","aliases":[],"url":"https://o3.security/vulnerability/CVE-2014-6324","summary":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows…","details":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka \"Kerberos Checksum Vulnerability.\"","published":"2014-11-18T23:59:02.503","modified":"2026-06-17T00:12:54.610","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.87448,"percentile":0.99747,"asOf":"2026-09-14"},"cisaKev":null,"exploitsKnown":5,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx"},{"type":"ADVISORY","url":"http://marc.info/?l=bugtraq&m=142350249315918&w=2"},{"type":"WEB","url":"http://secunia.com/advisories/62556"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/70958"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1031237"},{"type":"ADVISORY","url":"http://www.us-cert.gov/ncas/alerts/TA14-323A"},{"type":"FIX","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-068"},{"type":"ADVISORY","url":"http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx"},{"type":"ADVISORY","url":"http://marc.info/?l=bugtraq&m=142350249315918&w=2"},{"type":"WEB","url":"http://secunia.com/advisories/62556"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/70958"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1031237"},{"type":"ADVISORY","url":"http://www.us-cert.gov/ncas/alerts/TA14-323A"},{"type":"FIX","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-068"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6324"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T00:12:54.610"}}