This vulnerability, tracked as CVE-2026-47288 and classified under CWE-190 (Integer Overflow or Wraparound), affects Windows Server 2012 (version 6.2.9200.0). The flaw exists in the Windows Kerberos component and can be exploited by an authorized attacker with low privileges to execute arbitrary code remotely over an adjacent network. The CVSS v3.1 base score is 7.1, indicating high severity, with attack vector as adjacent network, high attack complexity, and low privileges required. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation of this vulnerability could allow an authorized attacker to execute arbitrary code on the affected system remotely over an adjacent network. This could lead to full compromise of confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47288 to remediate this vulnerability.