CVE-2024-49112
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Technical details are not provided in the description.
Risk Assessment
An attacker could remotely execute arbitrary code in the context of the LDAP service, potentially leading to system compromise.
Recommendation
Apply Microsoft security updates for Windows. Restrict access to the LDAP service from untrusted networks.
Other vulnerabilities in Windows LDAP
See all- CVE-2024-49113High
A Denial of Service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). Technical details are not provided in the description.
- CVE-2026-69428High
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- CVE-2026-62795High
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-62785High
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-20812Medium
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
- CVE-2024-21356Medium
Denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). An attacker could cause the LDAP service to crash, preventing access to directories.
Original NVD description (English source)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS