Microsoft Windows Link-Layer Discovery Protocol Privilege Escalation Vulnerability

Vulnerability

A double free vulnerability has been identified in the Windows Link-Layer Discovery Protocol (LLDP), allowing an authorized attacker to locally elevate privileges. This vulnerability requires exploitation of a race condition.

Impact

Successful exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is included in the May 2026 security updates. Instructions for downloading the update are available on the Microsoft Update Catalog.

Added: May 12, 2026, 8:07 PM
Updated: May 12, 2026, 8:07 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
2.9
remediation
7.7
relevance
8.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.