CVE-2011-0091: Microsoft Windows 7
Medium severity, CVSS 6.4. EPSS: 5.5% chance of exploitation in the next 30 days.
Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerability."
Affected products
Published 2011-02-10. Last modified 2026-06-16.