Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerberos hash file. The issue affects module_hash_decode in multiple Kerberos-related modules because account_info_len is calculated from untrusted delimiter positions without upper-bound validation before memcpy copies the data into a fixed-size account_info buffer.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-01 | 1 | Disclosure1 |
| 2026-05-13 | 4 | Disclosure3General1 |
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-42483 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The text is a brief disclosure of CVE-2026-42483, providing its CVSS score and critical severity, but no proof of concept, exploit code, or patch details.
CVE: CVE-2026-42483 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly…
Post summary
The text discloses a critical heap‑based buffer overflow vulnerability (CVE‑2026‑42483) in hashcat's Kerberos hash parser, noting its high CVSS score and severity, but offers no PoC, exploit, or patch details.
CRITICAL: CVE-2026-42483 (CVSS 9.8) — hashcat hashcat. CVE: CVE-2026-42483 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The advisory announces CVE-2026-42483 as a critical 9.8‑scored vulnerability affecting hashcat, but provides no PoC, exploit, active exploitation, or patch information.
CVE-2026-42483 Heap-Based Buffer Overflow in Hashcat Kerberos Hash Parser v7.1.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42483 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The text announces a heap-based buffer overflow vulnerability in Hashcat's Kerberos hash parser v7.1.2 and provides a link to a vulnerability database, but adds no PoC, exploit details, patch information, or evidence of active exploitation.
https://lyrie.ai/research/research/cve-2026-42483-hashcat-hashcat #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The link refers to research on CVE‑2026‑42483 related to Hashcat, but no concrete details on PoC, exploitation, or mitigation are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hashcat | hashcat | 7.1.2 | - | - |