CVE-2025-26673

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

CVE-2025-26652

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-26641

Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2025-26641

Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2025-21174

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-27486

CVE-2025-27486 affects Windows Standards-Based Storage Management Service, causing Denial-of-Service through uncontrolled resource consumption over the network. The primary public description confirms the vulnerability class, and Microsoft has released updates to address it (e.g., KBs in the Apri...

CVE-2025-27485

CVE-2025-27485 affects Windows Standards-Based Storage Management Service. The issue is uncontrolled resource consumption leading to network-based Denial of Service. CVSS 3.1 shows AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH) with network exploitation and no user interaction required. Con...

CVE-2025-27469

CVE-2025-27469 affects Windows LDAP (Lightweight Directory Access Protocol) and describes an uncontrolled resource consumption that enables an unauthenticated attacker to cause network-denied service. The issue is categorized as a Denial-of-Service via LDAP on the network. Microsoft has released ...

CVE-2025-26652

CVE-2025-26652 describes a Denial-of-Service vulnerability in Windows Standards-Based Storage Management Service caused by uncontrolled resource consumption, allowing an unauthenticated, network-originating attacker to deny service. Affected are Windows systems where this storage service is prese...

CVE-2025-21174

CVE-2025-21174 affects the Windows Standards-Based Storage Management Service. The vulnerability is a denial-of-service caused by uncontrolled resource consumption that an attacker can trigger over a network, with CVSS 3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5, HIGH). ...

CVE-2025-26680

CVE-2025-26680 affects the Windows Standards-Based Storage Management Service and describes an adversary-enabled condition of uncontrolled resource consumption leading to a network-based denial of service. The vulnerability is categorized with a high base score (CVSS 3.1: 7.5, NETWORK, no user in...

CVE-2024-52980 Elasticsearch Uncontrolled Resource Consumption vulnerability

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack requires a malicious user to have readpipeline Elasticsearch cluster privilege assigned to the...

CVE-2024-52980 Elasticsearch Uncontrolled Resource Consumption vulnerability

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack requires a malicious user to have readpipeline Elasticsearch cluster privilege assigned to the...

Kibana 7.17.23 and 8.15.1 Security Update (ESA-2024-36)

Kibana Uncontrolled Resource Consumption vulnerability ESA-2024-36 An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash. A successful attack requires a malicious user to have read permissions for Observability assigned ...

Logstash 8.15.1 Security Update (ESA-2024-35)

Logstash Uncontrolled Resource Consumption vulnerability ESA-2024-35 On August 19, 2024, Floraison announced CVE-2024-43380, which affects fugit "natural" parser. The parser turns natural language into a cron date and was found to accept any length of input, causing an uncontrolled resource...

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

HTTP.sys Denial of Service Vulnerability

Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...