The issue is related to the implementation of the Kerberos protocol in Windows, which can be manipulated to cause a timing mismatch vulnerability. This can allow a remote attacker to elevate their privileges. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.