Vulnerabilities

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1

CVSS v3.1

7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-122

Exposure class

Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-96016 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 42
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96184 Microsoft
2. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-96153 Microsoft
3. 42
   CVE NVD 3h ago

   Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96152 Microsoft
4. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96127 Microsoft
5. 42
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96126 Microsoft
6. 42
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96117 Microsoft
7. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96103 Microsoft
8. 42
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96102 Microsoft
9. 42
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96085 Microsoft
10. 42
    CVE NVD 3h ago

    Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96084 Microsoft
11. 36
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96074 Microsoft
12. 42
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96062 Microsoft
13. 36
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96057 Microsoft
14. 42
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96056 Microsoft
15. 36
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96055 Microsoft
16. 36
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96037 Microsoft
17. 42
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96005 Microsoft