This update resolves two newly-discovered vulnerabilities, a privately
reported vulnerability and a publicly reported vulnerability. Each vulnerability
is documented in this bulletin in its own “Vulnerability Details” section of this
bulletin. An attacker who successfully exploited the most severe of these
vulnerabilities could cause the service responsible for authenticating users
in an Active Directory domain to stop responding.