CVE-2026-40378CWE-789

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

High · published July 14, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01174 · 67.3th percentile
Weakness
CWE-789 · Memory Allocation with Excessive Size Value
Published
2026-07-14T17:05Z
EPSS history
Timeline
  • 14 JUL 17:05Z
    Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
    cvelistv5