CVE-2024-21356
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
Denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). An attacker could cause the LDAP service to crash, preventing access to directories.
Risk Assessment
Risk of disruption to directory services, which could impact authentication and authorization across the organization.
Recommendation
Install the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows LDAP
See all- CVE-2026-62795High
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-62785High
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-20812Medium
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
Original NVD description (English source)
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability