The vulnerability of the LSARPC interface method in the Windows LSA component of the Windows operating system allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the LSARPC interface method in the Windows LSA component of the Windows operating system is related to the possibility of bypassing the authentication mechanism. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack by redirecting NTLM...

Microsoft Patch Tuesday, May 2022 Edition

Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This months patch batch includes fixes for seven "critical" flaws, as well as a zero-day vulnerability that affects all supported versions of Windows. By all...

CVE-2022-26925

Windows LSA Spoofing Vulnerability...

CVE-2022-26925 Windows LSA Spoofing Vulnerability

...

VulnCheck KEV: CVE-2022-26925

Microsoft Windows Local Security Authority LSA contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM...

Microsoft Local Security Authority Server 访问控制错误漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Local Security Authority Server lsasrv. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

PT-2022-3212 · Microsoft · Windows Lsa +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: The issue is related to insufficient access control in the Local Security Authority Subsystem Service LSASS of Windows operating systems. It...

CVE-2022-24496

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-24496

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-24493

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

CVE-2022-24487

Windows Local Security Authority Subsystem Service LSASS Remote Code Execution Vulnerability...

CVE-2022-24493

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

Remote code execution

Windows Local Security Authority LSA Remote Code Execution Vulnerability...

CVE-2022-24496 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

...

CVE-2022-24493 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

...

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

...

PT-2022-2706 · Microsoft · Local Security Authority Subsystem Service +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: The issue is related to insufficient input validation in the Windows Local Security Authority Subsystem Service LSASS, which can be exploite...

Microsoft Windows Local Security Authority Subsystem Service 输入验证错误漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft Local Security Authority Server 信息泄露漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Local Security Authority Server lsasrv. The following products and editions are affected:Windows 10 Version 1809 for x64-based...

PT-2022-2894 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Local Security Authority Subsystem Service LSASS of Windows operating systems...