CVE-2025-27479

Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

Scoring

Severity

HIGH

CVSS base score

7.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

EPSS probability

2.19%

CWE

CWE-410

Published

2025-04-08

Last modified

2026-08-10

Affected products

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• Microsoft Windows Server 2012 R2
• Microsoft Windows Server 2012 R2 (Server Core installation)
• Microsoft Windows Server 2016
• Microsoft Windows Server 2016 (Server Core installation)
• Microsoft Windows Server 2019
• Microsoft Windows Server 2019 (Server Core installation)

Weakness type

• CWE-410

Related vulnerabilities

• CVE-2026-58218 — Samba: dns signing dos via tkey name cache exhaustion
• CVE-2026-34019 — BIG-IP BFD vulnerability
• CVE-2025-2134 — IBM Jazz Reporting Service Denial of Service
• CVE-2025-12986 — Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices
• CVE-2025-41653 — Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
• CVE-2025-20103 — Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow...
• CVE-2025-27694 — Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool...
• CVE-2025-0453 — Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

Markdown version · Browse all CVEs