Microsoft's Windows Key Distribution Center (KDC) Proxy service experienced a significant remote code execution vulnerability, tracked as CVE-2024-43639, which could have allowed unauthenticated attackers to execute arbitrary code on affected servers. The flaw, due to an integer overflow from missing length checks on Kerberos response handling, was patched in November 2024. Had it been exploited, attackers could have gained full control over compromised systems, underlining the critical importance of quick patch deployment in enterprise security.
Source: https://cybersecuritynews.com/windows-kdc-proxy-rce-vulnerability/
"id": "mic412030525",
"linkid": "microsoft",
"type": "Vulnerability",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"