Skip to content
Threat Feed
Subscribe

Product

Windows SMB Client

2 briefs RSS
high advisory

CVE-2026-40410 - Windows SMB Client Use-After-Free Privilege Escalation

CVE-2026-40410 is a use-after-free vulnerability in the Windows SMB Client that allows an authorized attacker to elevate privileges locally.

Windows SMB Client cve vulnerability smb privilege-escalation
2r 1t 1c
high advisory

DNS Kerberos Coercion Attempt Detection

This brief details the detection of DNS-based Kerberos coercion attacks, where adversaries inject marshaled credential structures into DNS records to spoof SPNs and redirect authentication, as seen in CVE-2025-33073, using Suricata and Sysmon event ID 22.

PoC Fortinet edge appliances +38 kerberos coercion dns cve-2025-33073
3r 3t 4c 4i updated