The vulnerability is an integer overflow or wraparound in Windows Kerberos Key Distribution Center (KDC) that permits an authorized attacker to execute arbitrary code on a server connected over the same network. This flaw can be used to gain remote code execution, which jeopardizes system confidentiality, integrity, and availability. The weakness corresponds to CWE‑190.

The affected products are Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, including Server Core installations. These versions run the KDC service for domain authentication.

The CVSS base score of 7.1 indicates a medium severity vulnerability. No EPSS score is available and the issue is not listed in CISA KEV, so there is no evidence of widespread exploitation. The likely attack path requires the attacker to be an authorized user who can request Kerberos tickets, and then exploit the integer overflow during ticket processing. Because the flaw is limited to an authenticated context, an attacker must first compromise or have legitimate credentials on the network to exploit it.