All packages
Windows Local Security Authority Subsystem Service (LSASS) vulnerabilities
3 known CVE vulnerabilities in Windows Local Security Authority Subsystem Service (LSASS), translated and rated.
- CVE-2026-96219Critical
An out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. The flaw occurs when data is written outside the allocated memory area.
- CVE-2026-20875High
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-20854High
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

