CVE-2026-69594
HighCVSS 7.8Summary
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit the vulnerability to gain system privileges, leading to full control of the system.
Recommendation
Apply the latest Microsoft security updates for Windows.
Other vulnerabilities in Microsoft Local Security Authority Server
See all- CVE-2026-69365High
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69277High
A stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
- CVE-2026-62784High
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.