A chilling new vulnerability has emerged at the core of enterprise Windows infrastructures: CVE-2025-49735, a use-after-free flaw in the Windows KDC Proxy Service (KPSSVC), exposes organizational networks to the risk of remote code execution by unauthorized attackers. As Windows remains the...
CVE-2025-33071 is a critical security vulnerability identified in the Windows Key Distribution Center (KDC) Proxy Service (KPSSVC). This "use-after-free" flaw allows unauthorized attackers to execute arbitrary code remotely over a network, posing significant risks to affected systems...