EUVD-2025-17789CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
6DescriptionNVD
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
AnalysisAI
Windows Local Security Authority Subsystem Service (LSASS) contains an uncontrolled resource consumption vulnerability that allows unauthenticated remote attackers to cause a denial of service. Crashing or degrading LSASS disrupts all authentication and authorization on the affected Windows server, effectively taking the system offline.
Technical ContextAI
LSASS handles all authentication and authorization decisions on Windows systems. An uncontrolled resource consumption flaw allows a remote attacker to exhaust LSASS resources, causing the service to become unresponsive. When LSASS fails, the system cannot process logons, validate Kerberos tickets, or enforce security policies, effectively denying all access to the machine.
RemediationAI
Apply the Microsoft security update. Implement network segmentation to restrict access to LSASS-exposed ports on domain controllers. Monitor LSASS resource usage for anomalies. Ensure multiple domain controllers for redundancy.
More from same product – last 7 days
{filename} endpoint. The flawed traversal guard only rejects forward slashes and '..' sequences, so absolute Windows pat
Remote code execution in Microsoft Azure Orbital Spatio allows unauthenticated network attackers to upload dangerous fil
Unsafe deserialization in Microsoft Planetary Computer Pro (Geocatalog) lets a remote unauthenticated attacker craft mal
Remote code execution in Microsoft Power Pages allows unauthenticated network attackers to inject and execute operating-
Privilege elevation in Microsoft Azure Resource Manager (ARM) allows remote unauthenticated attackers to bypass authenti
Share
External POC / Exploit Code
Leaving vuln.today