PT-2026-32735 · Microsoft · Local Security Authority Subsystem Service+1

Howard Mcgreehan · Published 2026-04-14 · Updated 2026-05-22 · CVE-2026-26155

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Local Security Authority Subsystem Service (affected versions not specified)

Description An issue exists that allows attackers to obtain sensitive information and affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

BDU:2026-05465

CVE-2026-26155

Affected Products

Local Security Authority Subsystem Service

Windows

References · 6

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26155 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-26155 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05465 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26155 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-26155 · Security Note
• https://twitter.com/lxware_x/status/2057838918104764509 · Twitter Post