Product:
Windows Local Security Authority Subsystem Service
Summary
A null pointer dereference vulnerability in Windows Local Security Authority Subsystem Service allows an unauthorized attacker to deny service over a network. This can lead to significant disruptions in service availability. The issue arises from improper handling of null pointers, which can be exploited by attackers.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-20875 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network requests to the affected service. By triggering the null pointer dereference, the attacker can cause the service to crash, resulting in a denial of service. This attack does not require any special privileges or user interaction, making it easier for unauthorized users to exploit.
Affected Products
- Windows Local Security Authority Subsystem Service: Vulnerable to denial of service attacks due to null pointer dereference.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, network security measures should be implemented to monitor and restrict unauthorized access to the affected service.