CVE-2026-49799

MediumCVSS 6.5

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

52th percentile - higher than 52% of all known CVEs

Summary

Uncontrolled resource consumption in Windows LSASS allows an authorized attacker to cause a denial of service over the network.

Risk Assessment

The attack can overload LSASS, leading to authentication failures and system lockout.

Recommendation

Apply the Microsoft security patch for Windows.

Other vulnerabilities in Windows LSASS

CVE-2026-40378High
Memory allocation with excessive size vulnerability in Windows LSASS. An unauthorized attacker can remotely cause a denial of service.

Original NVD description (English source)

Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.