CVE-2026-83516
HighCVSS 7.5Summary
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
Risk Assessment
Remote attack could crash LSASS, leading to authentication failure and system unavailability.
Recommendation
Apply security updates for LSASS and monitor network traffic for anomalies.
Other vulnerabilities in Windows LSASS
See all- CVE-2026-83928High
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-70015High
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-49799Medium
Uncontrolled resource consumption in Windows LSASS allows an authorized attacker to cause a denial of service over the network.
- CVE-2026-40378High
Memory allocation with excessive size vulnerability in Windows LSASS. An unauthorized attacker can remotely cause a denial of service.
Original NVD description (English source)
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS