CVE-2024-20674

—

CVSS 3.1

8.8 high

EPSS

17%p97

Published

Jan 9, 2024 (Jan 9, 2024)

Modified

Jun 17, 2026

Description

Windows Kerberos Security Feature Bypass Vulnerability

Vendors: microsoft
Products: windows 10 1507, windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 11 23h2, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Weakness: CWE-305, CWE-290
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (17.2%)

In the news7 stories

Week in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-days

Help Net SecurityJan 14, 00:00 UTC · Jan 14, 2024Ransomware in the wildCVE-2023-7028 CVE-2024-20674 CVE-2024-20700+4 CVEs

60

Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

The Hacker NewsJan 10, 10:14 UTC · Jan 10, 2024Vulnerability in the wildCVE-2023-7024 CVE-2024-20674 CVE-2024-20700+3 CVEs

60

Microsoft Fixes 12 RCE Bugs in January Patch Tuesday

Infosecurity MagazineJan 10, 09:30 UTC · Jan 10, 2024Vulnerability CVE-2024-20674 CVE-2024-20700 CVE-2024-0056

60

Microsoft Patch Tuesday for January 2024 fixed 2 critical flaws

Security AffairsJan 9, 22:02 UTC · Jan 9, 2024Vulnerability in the wildCVE-2024-20700 CVE-2024-20674

60

January 2024 Patch Tuesday forecast: A Focus on Printing

Help Net SecurityJan 9, 20:09 UTC · Jan 9, 2024Vulnerability CVE-2024-20674 CVE-2024-20700

60

Microsoft starts off new year with relatively light Patch Tuesday, no zero

Cisco TalosJan 9, 18:58 UTC · Jan 9, 2024Vulnerability in the wildCVE-2024-20674 CVE-2024-20700 CVE-2024-21307+2 CVEs

60

Microsoft fixes critical flaws in Windows Kerberos, Hyper-V (CVE-2024-20674, CVE-2024-20700)

Help Net SecurityJan 9, 00:00 UTC · Jan 9, 2024Vulnerability in the wildCVE-2024-20674 CVE-2024-20700 CVE-2024-21318+6 CVEs

60