How many CVEs does mit kerberos 5 have?

mit kerberos 5 has 142 published CVE records since 1999.

How many mit kerberos 5 CVEs are in CISA KEV?

None of mit kerberos 5's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for mit kerberos 5 vulnerabilities?

Yes — 21 of mit kerberos 5's CVEs have a known public exploit.

Which versions of mit kerberos 5 are affected?

157 distinct mit kerberos 5 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in mit kerberos 5 CVEs?

mit kerberos 5's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-20 (Improper Input Validation), CWE-415 (Double Free), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

How many critical mit kerberos 5 vulnerabilities are there?

mit kerberos 5 has 34 critical and 40 high-severity CVEs.

What is the average severity of mit kerberos 5 CVEs?

The average CVSS base score across mit kerberos 5's scored CVEs is 6.8.

mit kerberos 5 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every mit kerberos 5 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.8 <= v <= 1.821 CVEs
1.8.1 <= v <= 1.8.119 CVEs
1.7 <= v <= 1.718 CVEs
1.8.2 <= v <= 1.8.218 CVEs
1.8.3 <= v <= 1.8.318 CVEs
1.1.1 <= v <= 1.1.116 CVEs
1.9 <= v <= 1.915 CVEs
1.12 <= v <= 1.1214 CVEs
1.12.1 <= v <= 1.12.114 CVEs
1.2.2 <= v <= 1.2.214 CVEs
1.7.1 <= v <= 1.7.114 CVEs
1.11 <= v <= 1.1113 CVEs
1.5 <= v <= 1.513 CVEs
1.1 <= v <= 1.112 CVEs
1.10 <= v <= 1.1012 CVEs
1.10.1 <= v <= 1.10.112 CVEs
1.11.1 <= v <= 1.11.112 CVEs
1.11.2 <= v <= 1.11.212 CVEs
1.11.3 <= v <= 1.11.312 CVEs
1.2.1 <= v <= 1.2.112 CVEs
1.4 <= v <= 1.412 CVEs
1.4.1 <= v <= 1.4.112 CVEs
1.6 <= v <= 1.612 CVEs
1.6.1 <= v <= 1.6.112 CVEs
1.6.2 <= v <= 1.6.212 CVEs
1.11.4 <= v <= 1.11.411 CVEs
1.12.2 <= v <= 1.12.211 CVEs
1.5.2 <= v <= 1.5.211 CVEs
1.10.2 <= v <= 1.10.210 CVEs
1.11.5 <= v <= 1.11.510 CVEs
1.13 <= v <= 1.1310 CVEs
1.2.3 <= v <= 1.2.310 CVEs
1.2.4 <= v <= 1.2.410 CVEs
1.3 <= v <= 1.310 CVEs
1.4.2 <= v <= 1.4.210 CVEs
1.4.3 <= v <= 1.4.310 CVEs
1.5.1 <= v <= 1.5.110 CVEs
1.8.4 <= v <= 1.8.410 CVEs
1.3.4 <= v <= 1.3.49 CVEs
1.5.3 <= v <= 1.5.39 CVEs
1.9.1 <= v <= 1.9.19 CVEs
1.0 <= v <= 1.08 CVEs
1.10.3 <= v <= 1.10.38 CVEs
1.10.4 <= v <= 1.10.48 CVEs
1.2 <= v <= 1.28 CVEs
1.3.3 <= v <= 1.3.38 CVEs
1.4.4 <= v <= 1.4.48 CVEs
1.2.5 <= v <= 1.2.57 CVEs
1.2.6 <= v <= 1.2.67 CVEs
1.2.7 <= v <= 1.2.77 CVEs
1.3.1 <= v <= 1.3.17 CVEs
1.3.2 <= v <= 1.3.27 CVEs
1.8.5 <= v <= 1.8.57 CVEs
1.8.6 <= v <= 1.8.67 CVEs
1.13.1 <= v <= 1.13.16 CVEs
1.14 <= v <= 1.146 CVEs
1.3.5 <= v <= 1.3.56 CVEs
1.3.6 <= v <= 1.3.66 CVEs
1.9.2 <= v <= 1.9.26 CVEs
1.9.3 <= v <= 1.9.36 CVEs
1.9.4 <= v <= 1.9.46 CVEs
1.0.6 <= v <= 1.0.64 CVEs
1.12.3 <= v <= 1.12.34 CVEs
1.13.2 <= v <= 1.13.24 CVEs
1.13.3 <= v <= 1.13.34 CVEs
1.14.1 <= v <= 1.14.14 CVEs
< 1.143 CVEs
< 1.6.13 CVEs
<= 1.6.13 CVEs
1.0 <= v <= 1.0.73 CVEs
1.14.2 <= v <= 1.14.23 CVEs
1.2.8 <= v <= 1.2.83 CVEs
1.21.2 <= v <= 1.21.23 CVEs
< 1.10.42 CVEs
< 1.13.42 CVEs
< 1.21.32 CVEs
<= 1.22.22 CVEs
<= 1.6.32 CVEs
<= 1.6.3_kdc2 CVEs
1.13.4 <= v <= 1.13.42 CVEs
1.13.5 <= v <= 1.13.52 CVEs
1.13.6 <= v <= 1.13.62 CVEs
1.14 <= v < 1.14.12 CVEs
1.14.3 <= v <= 1.14.32 CVEs
1.14.4 <= v <= 1.14.42 CVEs
1.14.5 <= v <= 1.14.52 CVEs
1.15 <= v <= 1.152 CVEs
1.15.1 <= v <= 1.15.12 CVEs
1.18 <= v < 1.22.32 CVEs
1.18.0 <= v <= 1.22.22 CVEs
5-1.6 <= v < 5-1.21.22 CVEs
< 1.10.51 CVE
< 1.10.71 CVE
< 1.11.31 CVE
< 1.12.21 CVE
< 1.13.11 CVE
< 1.17.21 CVE
< 1.18.41 CVE
< 1.18.51 CVE
< 1.2.21 CVE
< 1.20.21 CVE
< 1.6.41 CVE
<= 1.0.31 CVE
<= 1.15.21 CVE
<= 1.2.81 CVE
<= 1.3.31 CVE
<= 1.3.41 CVE
<= 1.3.51 CVE
<= 1.4.11 CVE
<= 1.7.11 CVE
>= 1.21.21 CVE
1.0 <= v < 1.16.11 CVE
1.0 <= v <= 1.2.61 CVE
1.12.4 <= v <= 1.12.41 CVE
1.12.5 <= v <= 1.12.51 CVE
1.14.0 <= v <= 1.14.01 CVE
1.16.1 <= v <= 1.17.11 CVE
1.18.0 <= v < 1.18.31 CVE
1.19.0 <= v < 1.19.21 CVE
1.19.0 <= v < 1.19.31 CVE
1.20 <= v <= 1.201 CVE
1.21 <= v < 1.21.21 CVE
1.21 <= v <= 1.211 CVE
1.5 <= v <= 1.5.11 CVE
1.5 <= v <= 1.6.21 CVE
1.5 <= v <= 1.6.31 CVE
1.6.3 <= v <= 1.6.31 CVE
1.7 <= v < 1.221 CVE
1.8 <= v < 1.19.41 CVE
1.8 <= v < 1.8.21 CVE

Fixed in

1.143 CVEs
1.6.13 CVEs
1.10.42 CVEs
1.13.42 CVEs
1.14.12 CVEs
1.21.32 CVEs
1.22.32 CVEs
5-1.21.22 CVEs
1.10.51 CVE
1.10.71 CVE
1.11.31 CVE
1.12.21 CVE
1.13.11 CVE
1.16.11 CVE

Find a version

142 CVEs

Sort

MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()
CVE-2026-107778
Patch
CWE-476
High · CVSS 7.1
EPSS 0.4% (35th pct)2026-10-08
MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC
CVE-2026-107708
Patch
CWE-476
Medium · CVSS 6.9
EPSS 0.5% (43th pct)2026-10-08
High vulnerability · 2026-04-28
CVE-2026-40356
Public exploit
Patch
CWE-191
High · CVSS 7.5
EPSS 0.8% (55th pct)2026-04-28
High vulnerability · 2026-04-28
CVE-2026-40355
Public exploit
Patch
CWE-476
High · CVSS 7.5
EPSS 0.8% (57th pct)2026-04-28
High vulnerability · 2026-01-16
CVE-2025-24528
Patch
CWE-190
High · CVSS 7.1
EPSS 0.5% (42th pct)2026-01-16
Critical vulnerability · 2024-06-28
CVE-2024-37371
Patch
CWE-125
Critical · CVSS 9.1
EPSS 1.9% (79th pct)2024-06-28
High vulnerability · 2024-06-28
CVE-2024-37370
Patch
CWE-345
High · CVSS 7.5
EPSS 0.7% (54th pct)2024-06-28
Medium vulnerability · 2024-02-26
CVE-2024-26462
Public exploit
Patch
CWE-401
Medium · CVSS 5.5
EPSS 0.4% (37th pct)2024-02-26
High vulnerability · 2024-02-26
CVE-2024-26461
Public exploit
Patch
CWE-770
High · CVSS 7.5
EPSS 1.1% (66th pct)2024-02-26
Medium vulnerability · 2024-02-26
CVE-2024-26458
Public exploit
Patch
CWE-401
Medium · CVSS 5.3
EPSS 0.8% (56th pct)2024-02-26
High vulnerability · 2023-08-16
CVE-2023-39975
Patch
CWE-415
High · CVSS 8.8
EPSS 1.5% (73th pct)2023-08-16
Medium vulnerability · 2023-08-07
CVE-2023-36054
Patch
CWE-824
Medium · CVSS 6.5
EPSS 2.8% (86th pct)2023-08-07
High vulnerability · 2022-12-25
CVE-2022-42898
Public exploit
Patch
CWE-190
High · CVSS 8.8
EPSS 6.5% (94th pct)2022-12-25
High vulnerability · 2022-08-30
CVE-2022-39028
Public exploit
Patch
CWE-476
High · CVSS 7.5
EPSS 2.1% (81th pct)2022-08-30
Medium vulnerability · 2021-08-23
CVE-2021-37750
Patch
CWE-476
Medium · CVSS 6.5
EPSS 2.5% (84th pct)2021-08-23
High vulnerability · 2021-07-22
CVE-2021-36222
Patch
CWE-476
High · CVSS 7.5
EPSS 10.5% (96th pct)2021-07-22
High vulnerability · 2020-11-06
CVE-2020-28196
Patch
CWE-674
High · CVSS 7.5
EPSS 4.4% (91th pct)2020-11-06
High vulnerability · 2019-09-26
CVE-2019-14844
Patch
CWE-628
High · CVSS 7.5
EPSS 4.4% (91th pct)2019-09-26
Medium vulnerability · 2018-07-26
CVE-2017-7562
Patch
CWE-287
Medium · CVSS 6.5
EPSS 3.2% (88th pct)2018-07-26
Low vulnerability · 2018-03-06
CVE-2018-5730
Patch
CWE-90
Low · CVSS 3.8
EPSS 2.2% (82th pct)2018-03-06
Medium vulnerability · 2018-03-06
CVE-2018-5729
Patch
CWE-476
Medium · CVSS 4.7
EPSS 2.6% (85th pct)2018-03-06
Critical vulnerability · 2017-11-23
CVE-2017-15088
Patch
CWE-121
Critical · CVSS 9.8
EPSS 8.3% (95th pct)2017-11-23
Critical vulnerability · 2017-09-13
CVE-2017-11462
Patch
CWE-415
Critical · CVSS 9.8
EPSS 5.5% (93th pct)2017-09-13
Medium vulnerability · 2017-08-09
CVE-2017-11368
Patch
CWE-617
Medium · CVSS 6.5
EPSS 2.4% (84th pct)2017-08-09
Medium vulnerability · 2016-08-01
CVE-2016-3120
Patch
CWE-476
Medium · CVSS 6.5
EPSS 4.6% (92th pct)2016-08-01
Medium vulnerability · 2016-03-26
CVE-2016-3119
Patch
Medium · CVSS 5.3
EPSS 39.8% (99th pct)2016-03-26
Medium vulnerability · 2016-02-13
CVE-2015-8631
Patch
CWE-772
Medium · CVSS 6.5
EPSS 4.6% (92th pct)2016-02-13
High vulnerability · 2016-02-13
CVE-2015-8630
Patch
High · CVSS 7.5
EPSS 4.3% (91th pct)2016-02-13
Medium vulnerability · 2016-02-13
CVE-2015-8629
Patch
CWE-125
Medium · CVSS 5.3
EPSS 3.7% (89th pct)2016-02-13
High vulnerability · 2015-11-13
CVE-2015-2698
Patch
CWE-119
High · CVSS 8.5
EPSS 2.9% (87th pct)2015-11-13

Showing 30 of 142

mit kerberos 5 Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other mit products

Frequently asked questions

References

Track mit kerberos 5 vulnerabilities