KLA84760 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

CVE-2020-1267

This security update corrects a denial of service in the Local Security Authority Subsystem Service LSASS caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'...

CVE-2024-49126

CVE-2024-49126 affects Windows Local Security Authority Subsystem Service (LSASS) and enables remote code execution. The CVSS v3.1 base context shows Network attack vector, high impact on confidentiality, integrity, and availability, with no privileges required and no user interaction. Connected ...

PT-2024-9468 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability in the Windows Local Security Authority Subsystem Service LSASS is related to the use of insecure mechanisms for handling authentication data in the operating system's...

CVE-2024-49126: Use After Free

Windows Local Security Authority Subsystem Service LSASS Remote Code Execution Vulnerability...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows attackers to disclose sensitive information that is protected by this service.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems relates to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by this service...

CVE-2024-26209

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...

CVE-2024-26209 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

CVE-2024-26209: Use of Uninitialized Resource

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...

Information disclosure

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...

CVE-2024-20692

Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.

Microsoft Windows Local Security Authority Subsystem Service Security Vulnerability

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

CVE-2024-20692: Inadequate Encryption Strength

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...

PT-2024-1126 · Microsoft · Lsass +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to a lack of protection for service data in the Local Security Authority Subsystem Service LSASS of the Windows operating...

CVE-2023-36391

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2023-36391

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2023-36391 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

...

CVE-2023-36391

CVE-2023-36391 is a Local Security Authority Subsystem Service (LSASS) elevation-of-privilege vulnerability in Windows. The ENISA/NC SC advisory cites LSASS as affected and lists the impact as Obtain increased privileges . The CVE is associated with a local-exploit path and is addressed by Micros...

CVE-2023-36391: Improper Link Resolution Before File Access

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...