CVE-2016-0049

The record

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate password changes, which allows remote attackers to bypass authentication by deploying a crafted Key Distribution Center (KDC) and then performing a sign-in action, aka "Windows Kerberos Security Feature Bypass."

Affected packages

Related vulnerabilities

• CVE-2026-19750 A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. CWE-255
• CVE-2026-11552 A vulnerability has been found in SourceCodester Onlne Examination & Learning Management… CWE-255
• CVE-2026-11515 A vulnerability has been found in SourceCodester Barangay Resident Profiling and… CWE-255
• CVE-2026-6597 A weakness has been identified in langflow-ai langflow up to 1.8.3. CWE-255
• CVE-2026-4251 A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. CWE-255
• CVE-2026-4250 A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to… CWE-255
• CVE-2026-4242 A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0… CWE-255
• CVE-2026-4243 A weakness has been identified in La Nacion App 10.2.25 on Android. CWE-255