CVE-2026-20875

HighCVSS 7.5

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.53%

72th percentile - higher than 72% of all known CVEs

Summary

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

Risk Assessment

An attacker can crash the LSASS service, disrupting authentication and making the system unavailable to users.

Recommendation

Install the latest Windows security updates from Microsoft.

Other vulnerabilities in Windows Local Security Authority Subsystem Service (LSASS)

CVE-2026-20854High
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network.

Original NVD description (English source)

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.