Search: CVE-2026-104034

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.7	EPSS <0.1%	CVE-2026-104034Red Hat Enterprise Linux 10 · Expired Pointer Dereference Medium4.7EPSS <0.1%2026-10-06CVE Database V5CVE-2026-104034 CVE-2026-104034 is a use-after-free vulnerability in the Kerberos Credential Manager (KCM) responder component of SSSD on Red Hat Enterprise Linux 10. It occurs during Kerberos ticket-granting ticket (TGT) renewal when a deferred callback accesses memory that has already been freed. An authenticated local user with a renewable Kerberos ticket can exploit this to crash the KCM responder service, causing a denial of service (DoS). The vulnerability has a medium severity rating with a CVSS score of 4.7. EPSS <0.1%Vulnerability	CVE Database V5	2026-10-06

Page 1 of 1 · 1 duplicate CVE record merged