Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

Vulnerability

A vulnerability allowing information disclosure has been identified in the Local Security Authority Subsystem Service (LSASS) on multiple Microsoft Windows platforms. This vulnerability could allow an attacker to read portions of heap memory, potentially leading to the exposure of sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information by allowing attackers to read portions of heap memory.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the 'Security Updates' section.

Added: Apr 14, 2026, 10:55 PM
Updated: Apr 14, 2026, 10:55 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
5.2
remediation
0.0
relevance
5.9
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.