Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

PT-2025-15479 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: A time-of-check time-of-use toctou race condition exists, allowing an authorized attacker to elevate privileges locally. This issue can be exploited by attacker...

PT-2025-15537 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: A heap-based buffer overflow issue allows an authorized attacker to elevate privileges locally. This elevation-of-privilege issue can be exploited by attackers ...

CVE-2024-43522

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-35759

Windows Local Security Authority LSA Denial of Service Vulnerability...

PT-2023-1136 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: The issue is related to insufficient access control in the Windows Local Security Authority LSA service, which can be exploited to elevate privileges. This allo...

PT-2022-4335 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: The issue is related to insufficient input validation in the Local Security Authority LSA service of the Microsoft Windows operating system. It can be exploited...

VulnCheck KEV: CVE-2021-36942

Microsoft Windows Local Security Authority LSA contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM...

PT-2021-3785

Name of the Vulnerable Software and Affected Versions Microsoft Windows Local Security Authority LSA versions are affected, but specific versions are not provided in the input data. Description A spoofing issue allows attackers to affect the system. The problem is related to the Local Security...

CVE-2021-33788

Windows LSA Denial of Service Vulnerability...

[Full-Disclosure] EEYE: Windows Local Security Authority Service Remote Buffer Overflow

Windows Local Security Authority Service Remote Buffer Overflow Release Date: April 13, 2004 Date Reported: October 8, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows XP Description: eEye Digital Security has discovered a remote buffer overflow i...