CVE-2026-40378

HighCVSS 7.5

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.82%

53th percentile - higher than 53% of all known CVEs

Summary

Memory allocation with excessive size vulnerability in Windows LSASS. An unauthorized attacker can remotely cause a denial of service.

Risk Assessment

The attack can crash the LSASS service, preventing user authentication and potentially leading to system unavailability.

Recommendation

Install the security update for Windows LSASS from Microsoft.

Other vulnerabilities in Windows LSASS

CVE-2026-49799Medium
Uncontrolled resource consumption in Windows LSASS allows an authorized attacker to cause a denial of service over the network.

Original NVD description (English source)

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.