CVE-2026-49799
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Uncontrolled resource consumption in Windows LSASS allows an authorized attacker to cause a denial of service over the network.
Risk Assessment
The attack can overload LSASS, leading to authentication failures and system lockout.
Recommendation
Apply the Microsoft security patch for Windows.
Other vulnerabilities in Windows LSASS
See all- CVE-2026-83928High
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-83516High
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-70015High
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-40378High
Memory allocation with excessive size vulnerability in Windows LSASS. An unauthorized attacker can remotely cause a denial of service.
Original NVD description (English source)
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS