HIGHCVE-2026-21243Published Modified CNA microsoft
CVE-2026-21243: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
Metrics
- CVSS v3.1
- 7.5
- Severity
- HIGH
- Fixed in
- 10.0.17763.8389
- Affected Products
- 6
Fix available
10.0.17763.838910.0.20348.477310.0.25398.214910.0.26100.32370
Affected packages
- Microsoft / Windows Server 2019< 10.0.17763.8389 (from 10.0.17763.0)
- Microsoft / Windows Server 2019 (Server Core installation)< 10.0.17763.8389 (from 10.0.17763.0)
- Microsoft / Windows Server 2022< 10.0.20348.4773 (from 10.0.20348.0)
- Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)< 10.0.25398.2149 (from 10.0.25398.0)
- Microsoft / Windows Server 2025< 10.0.26100.32370 (from 10.0.26100.0)
- Microsoft / Windows Server 2025 (Server Core installation)< 10.0.26100.32370 (from 10.0.26100.0)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C