← Database

CVE-2026-20854

HIGH CVSS: 7.5 Published: 2026-01-13 Modified: 2026-07-30

Description

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network.

Affected Platforms

Microsoft Windows 11 24H2Microsoft Windows 11 25H2Microsoft Windows Server 2025

Weakness Type

CWE-416

References