Active Directory Privilege Escalation via Critical CVE Exploitation and Misconfiguration
Kerberos PAC Validation Bypass (CVE-2014-6324)
This vulnerability exploits improper validation of the Privilege Attribute Certificate (PAC) during Kerberos ticket-granting requests. Successful execution requires valid credentials for a standard domain account combined with local administrative privileges on any domain-joined workstation. The at ...
Posted on Sun, 06 Sep 2026 16:51:49 +0000 by douceur