Product:
Local Security Authority Subsystem Service
Summary
Microsoft Local Security Authority Subsystem Service has an information disclosure vulnerability that could allow an attacker to gain access to sensitive information. This vulnerability is characterized by a low attack complexity and requires minimal privileges to exploit. The potential impact includes high confidentiality loss without affecting the integrity or availability of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-26155 |
Exploitation
To exploit this vulnerability, an attacker can leverage the low attack complexity and network access to send specially crafted requests to the Local Security Authority Subsystem Service. By doing so, they can potentially retrieve sensitive information that should be protected, leading to unauthorized access to confidential data.
Affected Products
- Local Security Authority Subsystem Service: Vulnerable to information disclosure, allowing attackers to access sensitive information.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring for unusual activity can also help reduce the risk of exploitation.