CVE-2026-20812
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
Risk Assessment
An authorized attacker could modify data transmitted via LDAP, potentially leading to directory integrity compromise, unauthorized configuration changes, or privilege escalation.
Recommendation
Install the latest Windows security updates that address this vulnerability in the LDAP component.
Other vulnerabilities in Windows LDAP
See all- CVE-2026-69428High
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- CVE-2026-62795High
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-62785High
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2024-21356Medium
Denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). An attacker could cause the LDAP service to crash, preventing access to directories.
Original NVD description (English source)
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS