Microsoft Windows Server 2012
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*
A double free vulnerability has been identified in the Windows Link-Layer Discovery Protocol (LLDP), allowing an authorized attacker to locally elevate privileges. This vulnerability requires exploitation of a race condition.
Successful exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.
Users can apply the security update for this vulnerability, which is included in the May 2026 security updates. Instructions for downloading the update are available on the Microsoft Update Catalog.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.