MIT vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20191
3. 20265

Newest CVEs

• CVE-2026-107778

  MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()

  MIT · krb5

  High7.1
• CVE-2026-107708

  MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC

  MIT · krb5

  Medium6.9
• CVE-2026-40356

  In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on…

  MIT · Kerberos 5

  Medium5.9
• CVE-2026-40355

  In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx…

  MIT · Kerberos 5

  Medium5.9
• CVE-2025-24528

  In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An…

  MIT · Kerberos 5

  High7.1
• CVE-2019-14844

  A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…

  MIT · krb5

  High7.5
• CVE-2017-7562

  An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker…

  MIT · krb5

  Medium6.5