Product:
Local Security Authority Subsystem Service
Summary
This vulnerability allows for elevation of privilege within the Local Security Authority Subsystem Service. An attacker can exploit this flaw to gain higher privileges on the affected system. The impact includes potential unauthorized access to sensitive information and system resources.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-54894 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system. By executing a specially crafted application, the attacker can manipulate the Local Security Authority Subsystem Service to elevate their privileges. This can lead to unauthorized actions being performed with elevated rights.
Affected Products
- Local Security Authority Subsystem Service: A critical component of Windows that enforces security policies and manages user authentication.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting local access to systems and monitoring for unusual activities can help reduce the risk of exploitation.