CVE-2015-6095
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows...
- Published
- Nov 11, 2015
- Updated
- Aug 6, 2024
- Assigning CNA
- microsoft
- Evidence observed
- Aug 5, 2026
Primary CVSS
nvd · CVSS 2.0
AV:L/AC:L/Au:N/C:N/I:C/A:NLow · next 30 days
- Percentile
- 90.1%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles password changes, which allows physically proximate attackers to bypass authentication, and conduct decryption attacks against certain BitLocker configurations, by connecting to an unintended Key Distribution Center (KDC), aka "Windows Kerberos Security Feature Bypass."
Sources
1- blueboxExploit
Automated Exploit Toolkit for CVE-2015-6095 and CVE-2016-0049
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.