cve-2026-42914

CVE-2026-42914 is an Important-rated denial-of-service vulnerability in Microsoft Windows Kerberos, disclosed on June 9, 2026. It affects supported Windows client and server releases, with official fixes available through the June 2026 security updates. At disclosure, there was no public exploitation or active attacks. The vulnerability could allow an attacker to disrupt Kerberos authentication services, potentially causing widespread authentication failures in Windows domains. Administrators are advised to apply the June security patches promptly to mitigate the risk of service outages.