CVE-2026-20875CWE-476

CVE-2026-20875

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky null pointer dereference in Windows LSASS could give an unauthorized attacker the power to pull the plug on your network! Think of LSASS as the gatekeeper of a fortress; a null pointer dereference is like a faulty guard who forgets their post, leaving the entrance vulnerable to anyone who wants to cause trouble. If exploited, this vulnerability could lead to a denial of service, effectively shutting down critical security services on your Windows network. Imagine your fortress without a gatekeeper — anyone could stroll in and disrupt operations! 🔥

Put simply

Think of LSASS as the gatekeeper of a fortress; a null pointer dereference is like a faulty guard who forgets their post, leaving the entrance vulnerable to anyone who wants to cause trouble. The null pointer dereference flaw in LSASS allows an attacker to crash the service by sending specially crafted requests, resulting in disrupted communication and potential service outages.

What to do

If exploited, this vulnerability could lead to a denial of service, effectively shutting down critical security services on your Windows network. Imagine your fortress without a gatekeeper — anyone could stroll in and disrupt operations! 🔥 To protect your network, immediately apply the latest security updates from Microsoft that address this vulnerability. Additionally, monitor your network for unusual activity that could indicate attempts to exploit this issue. You've got this! With these steps, you'll bolster your defenses and keep that fortress standing strong! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01540 · 74.7th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-01-13T23:16Z
Affected products (19)
ProductVersionsFixed in
microsoft/windows_10_1607< 10.0.14393.878310.0.14393.8783
microsoft/windows_10_1607< 10.0.14393.878310.0.14393.8783
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_21h2< 10.0.19044.680910.0.19044.6809
microsoft/windows_10_22h2< 10.0.19045.680910.0.19045.6809
microsoft/windows_11_23h2< 10.0.22631.649110.0.22631.6491
microsoft/windows_11_24h2< 10.0.26100.762310.0.26100.7623
microsoft/windows_11_25h2< 10.0.26200.762310.0.26200.7623
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016< 10.0.14393.878310.0.14393.8783
microsoft/windows_server_2019< 10.0.17763.827610.0.17763.8276
microsoft/windows_server_2022< 10.0.20348.464810.0.20348.4648
microsoft/windows_server_2022_23h2< 10.0.25398.209210.0.25398.2092
microsoft/windows_server_2025< 10.0.26100.3223010.0.26100.32230
References (1)
EPSS history
Timeline
  • 13 JAN 17:56Z
    Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
    cvelistv5