{"id":"CVE-2026-83928","published":"2026-10-13T19:20:49.227","lastModified":"2026-10-16T16:21:48.580","description":"Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83928","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An out-of-bounds write vulnerability in Windows LSASS allows remote code execution by unauthorized attackers. This flaw occurs when LSASS processes certain authentication requests, potentially enabling attackers to execute arbitrary code on the target system.","exploitability":"Exploitation requires a network-based attack against LSASS with minimal prerequisites, as it's a remote code execution vulnerability that doesn't require user interaction or elevated privileges.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control of domain controllers and potentially compromise entire Active Directory environments across affected networks.","remediation":"Deploy Windows Security Update KB5068439 immediately as it contains the fix for CVE-2026-83928.","detection":"Monitor for异常 LSASS process memory access patterns and unexpected network connections to port 389 (LDAP) from external sources, as these may indicate exploitation attempts.","tags":["rce","ad","windows","lsass"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:59:56.134Z"}}