CVE-2026-62795
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker could remotely execute code, potentially leading to control of the directory service and the entire environment.
Recommendation
Install the latest Windows security updates for LDAP.
Other vulnerabilities in Windows LDAP
See all- CVE-2026-69428High
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- CVE-2026-62785High
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-20812Medium
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
- CVE-2024-21356Medium
Denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). An attacker could cause the LDAP service to crash, preventing access to directories.
Original NVD description (English source)
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS