PT-2025-24841 · Microsoft · Local Security Authority (Lsa) Server+1

Erik Egsgard · Published 2025-06-10 · Updated 2025-08-15 · CVE-2025-33056

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Local Security Authority Server (lsasrv) (affected versions not specified)

Description The issue is related to improper access control, which could allow an unauthorized attacker to deny service over a network. This could potentially leave systems vulnerable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-06858

CVE-2025-33056

Affected Products

Local Security Authority (Lsa) Server

Windows

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-33056 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-33056 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/722120 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33056 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-33056 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-33056 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06858 · Security Note
• https://twitter.com/windowsforum/status/1932495085783957586 · Twitter Post
• https://twitter.com/CVEnew/status/1932512947945025807 · Twitter Post