Kerberos PAC signature enforcement
No content change seen yet. Watched since 12 Oct 19:19 UTC, last read 19 Oct 23:40 UTC, next check today 23:40 UTC.
Read the Microsoft source · Link to this observation · My radar
Timeline
From the capture of 12 Oct 19:19 UTC- 8 dates
- 4 undated sections
- 1 with conditions
- Audit / monitoron or after 8 Nov 2022 Published timing is qualified; effectiveness is not confirmed.
- Audit / monitor13 Dec 2022 Published timing is qualified; effectiveness is not confirmed.
- Audit / monitor10 Apr 2023 Events or warnings only; nothing is blocked
- Audit / monitor11 Apr 2023 Events or warnings only; nothing is blocked
- Enforcedon or after 13 Jun 2023 Published timing is qualified; effectiveness is not confirmed.
- Enforced by defaultJuly 2023 On by default; an override or rollback still exists
- EnforcedOctober 2023 Now: Enforced; the override no longer helps
- Enforced10 Oct 2023 Published timing is qualified; effectiveness is not confirmed.
- 3 years agoon or afteror laterAudit / monitor · unconfirmed
CVE-2022-37967- Deployment guidelinesMilestone
- Kerberos protocolMilestone
- 3 years agoAudit / monitor · unconfirmed
- 3 years agoAudit / monitor
CVE-2022-37967April 10, 2023: Updated the "Third deployment phase" from April 11, 2023 to June 13, 2023 in the "Timing of updates to address CVE-2022-37967" section.…
- 3 years agofromAudit / monitor
CVE-2022-37967April 10, 2023: Updated the "Third deployment phase" from April 11, 2023 to June 13, 2023 in the "Timing of updates to address CVE-2022-37967" section.…
- 3 years agoon or afterEnforced · unconfirmed
CVE-2022-37967April 10, 2023: Updated the "Third deployment phase" from April 11, 2023 to June 13, 2023 in the "Timing of updates to address CVE-2022-37967" section.…
- 3 years agomonth windowstartingEnforced by default
- SummaryMilestone
CVE-2022-37967
- 2 years agomonth windowEnforced
- SummaryMilestone
CVE-2022-37967
- 3 years agoEnforced · unconfirmed
KrbtgtFullPacSignature
Settings and overrides named on this page
Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.
KrbtgtFullPacSignatureOverride10 Oct 2023
Requirements, exceptions and scope
KrbtgtFullPacSignature
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
Observed history and review priority
Captured 12 Oct 19:19 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.
Review priority. Extracted assertions require review · Applicability or exceptions require review
0 date changes and 0 condition changes across 0 compared revisions. Suggested check interval: 24 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Related public evidence
- Public source · 13 Oct 2026Active Directory Federation Services (AD FS) Spoofing Vulnerability
- Public source · 13 Oct 2026Active Directory Federation Services (AD FS) Spoofing Vulnerability
- Public source · 13 Oct 2026Windows Kerberos Elevation of Privilege Vulnerability
- Public source · 13 Oct 2026Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
- Public source · 13 Oct 2026Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
- Public source · 13 Oct 2026Windows Kerberos Elevation of Privilege Vulnerability
What changed
First observed 18 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.