CVE-2024-26209 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

CVE-2024-26209 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

PT-2024-3015 · Microsoft · Lsass +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Local Security Authority Subsystem Service LSASS of Windows operating system...

Microsoft Windows Local Security Authority Subsystem Service 安全漏洞

Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone or...

March 25, 2024—KB5037425 (OS Build 17763.5579) Out-of-band

None None...

March 22, 2024—KB5037423 (OS Build 14393.6799) Out-of-band

None None...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2024-20692

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...

Information disclosure

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...

CVE-2024-20692 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

CVE-2024-20692

Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.

Microsoft Windows Local Security Authority Subsystem Service Security Vulnerability

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

PT-2024-1126 · Microsoft · Lsass +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to a lack of protection for service data in the Local Security Authority Subsystem Service LSASS of the Windows operating...

The vulnerability of the Local Security Authority (LSA) service on Microsoft Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Local Security Authority LSA service on Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2023-36391

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2023-36391

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2023-36391

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2023-36391

CVE-2023-36391 is a Local Security Authority Subsystem Service (LSASS) elevation-of-privilege vulnerability in Windows. The ENISA/NC SC advisory cites LSASS as affected and lists the impact as Obtain increased privileges . The CVE is associated with a local-exploit path and is addressed by Micros...

CVE-2023-36391 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

...

PT-2023-7617 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Local Security Authority Subsystem Service, which can be exploited to elevate privileges. This allows an attacker t...