Windows Kerberos Elevation of Privilege Vulnerability

A flaw in Windows Kerberos authentication allows an attacker with local access to escalate their privileges to a higher level of system access. This is dangerous because it lets an unprivileged user gain administrative control over the computer.

An elevation of privilege vulnerability exists in the Windows Kerberos implementation (CWE-1390) where improper validation or handling of Kerberos tokens permits a locally authenticated attacker to bypass privilege restrictions. The attack requires prior local system access and successful exploitation results in unauthorized privilege escalation to SYSTEM or domain administrator context.