Product:
Windows Local Security Authority Subsystem Service
Summary
Null pointer dereference in Windows Local Security Authority Subsystem Service allows an unauthorized attacker to deny service over a network. This vulnerability can lead to significant service disruption. Attackers can exploit this flaw without needing any privileges or user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-32071 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network requests to the affected service. By triggering the null pointer dereference, the attacker can cause the service to crash, resulting in a denial of service. This can be done remotely, making it a significant threat to network availability.
Affected Products
- Windows Local Security Authority Subsystem Service: Vulnerable to denial of service due to null pointer dereference.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring network traffic can help prevent exploitation. Additionally, implementing network security measures can reduce the risk of unauthorized access.