CVE-2026-70015
HighCVSS 7.8Summary
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can gain elevated privileges, potentially leading to credential theft or system compromise.
Recommendation
Install the latest security patches for LSASS.
Other vulnerabilities in Windows LSASS
See all- CVE-2026-83928High
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-83516High
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-49799Medium
Uncontrolled resource consumption in Windows LSASS allows an authorized attacker to cause a denial of service over the network.
- CVE-2026-40378High
Memory allocation with excessive size vulnerability in Windows LSASS. An unauthorized attacker can remotely cause a denial of service.
Original NVD description (English source)
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS