CVE-2026-83928
HighCVSS 8.8Summary
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
Risk Assessment
The attack can lead to remote code execution in a critical security component, potentially compromising the entire system.
Recommendation
Install security updates and monitor network traffic to LSASS.
Other vulnerabilities in Windows LSASS
See all- CVE-2026-83516High
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-70015High
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-49799Medium
Uncontrolled resource consumption in Windows LSASS allows an authorized attacker to cause a denial of service over the network.
- CVE-2026-40378High
Memory allocation with excessive size vulnerability in Windows LSASS. An unauthorized attacker can remotely cause a denial of service.
Original NVD description (English source)
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS