Skip to content

Vulnerabilities of MIT Kerberos 5

Is your version affected?

CVE Summary Score Published
CVE-2026-40356 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an… 5.9 Medium Apr 28, 2026
CVE-2026-40355 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls… 5.9 Medium Apr 28, 2026
CVE-2025-24528 In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update… 7.1 High Jan 16, 2026

Other MIT products