This vulnerability (CVE-2026-27912) is classified as CWE-285 (Improper Authorization) and affects Windows Server 2012 version 6.2.9200.0. It involves a flaw in the Windows Kerberos implementation that permits an attacker with some level of authorization on an adjacent network to escalate their privileges. The CVSS v3.1 base score is 8.0, indicating high severity, with attack vector being adjacent network, low attack complexity, and no user interaction required. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An attacker who is authorized on an adjacent network can exploit this vulnerability to elevate their privileges, potentially gaining higher-level access than intended. This could lead to full compromise of the affected system, including confidentiality, integrity, and availability impacts as indicated by the CVSS metrics (high impact on all three).

Microsoft has released an official patch to address this vulnerability. It is recommended to apply the security update provided by Microsoft as soon as possible to mitigate the risk. No additional mitigation steps are indicated by the vendor advisory.