CVE-2025-27478: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

CVE-2024-43522: Heap-based Buffer Overflow

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2024-38118: Use of Uninitialized Resource

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

CVE-2023-21524: Use of Hard-coded Credentials

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-38016: Undefined Security Weakness

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-24496: Undefined Security Weakness

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-24493: Undefined Security Weakness

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

CVE-2021-43216: Exposure of Resource to Wrong Sphere

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

Microsoft Giving .NET Users The Option to Shed RC4

Microsoft didn’t beat around the bush when it warned customers to stay away from the deprecated RC4 algorithm last fall. Now it’s giving those who use its .NET software framework an option to disable the cipher in Transport Layer Security TLS as well. In a security advisory issued on its Security...

CVE-1999-0995: Improper Input Validation

Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...