Product by MIT
Krb5
12 known vulnerabilities in Krb5 (MIT), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-42898 | MIT Kerberos 5: Heap-Based Buffer Overflow | 8.8 | |
| High | CVE-2021-36222 | MIT Kerberos 5: NULL Pointer Dereference | 7.5 | |
| High | CVE-2019-14844 | MIT Krb5: Function Call with Incorrectly Specified Arguments | 7.5 | |
| Critical | CVE-2024-37371 | MIT Kerberos 5: security vulnerability | 9.1 | |
| Medium | CVE-2017-7562 | MIT Krb5: Improper Certificate Validation | 6.5 | |
| Medium | CVE-2026-107708 | MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC | 4.9 | |
| High | CVE-2026-107778 | MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() | 6.5 | |
| High | CVE-2026-40355 | MIT Kerberos 5: NULL Pointer Dereference | 7.5 | |
| High | CVE-2026-40356 | MIT Kerberos 5: Integer Underflow (Wrap or Wraparound) | 7.5 | |
| High | CVE-2024-37370 | MIT Kerberos 5: security vulnerability | 7.5 | |
| High | CVE-2025-24528 | MIT Kerberos 5: Integer Overflow or Wraparound | 7.1 | |
| Medium | CVE-2026-11850 | Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read | 5.0 |