CVE-2026-69594
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit the vulnerability to gain system privileges, leading to full control of the system.
Recommendation
Apply the latest Microsoft security updates for Windows.
Other vulnerabilities in Microsoft Local Security Authority Server
See all- CVE-2026-69365High
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69277High
A stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
- CVE-2026-62784High
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS