CVE-2014-6324: Microsoft Kerberos Key Distribution Center (KDC) Privilege

Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability. The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.

• CISA KEV-listed (remediation due 2022-04-15)
• EPSS 87.4% (99.7% percentile)
• CVSS 8.8 high

Related briefings

• The Shadow Brokers NSA Equation Group Leak: EternalBlue, EternalRomance, DoublePulsar, and the Fuzzbunch Framework Released April 2017 2026-02-16

Linked threat actors

• Equation Group machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions