---
id: "CVE-2026-112807"
page: "https://infrastack.ai/live/CVE-2026-112807"
kind: "vulnerability"
aliases: ["CVE-2026-112807"]
title: "Windows LSA Server: heap overflow lets an authorized user crash service remotely"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["active-directory", "infrastructure", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:18:44+00:00"
first_seen_at: "2026-11-10T19:24:34+00:00"
updated_at: "2026-11-10T19:57:55+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112807", "first_seen_at": "2026-11-10T19:24:34+00:00"}]
exploit_sources: []
---

# Windows LSA Server: heap overflow lets an authorized user crash service remotely

Link for people: https://infrastack.ai/live/CVE-2026-112807 (this .md is for agents)

A heap-based buffer overflow in the Microsoft Local Security Authority Server (lsasrv) can be triggered by an authorized attacker over the network. The sources say the result is denial of service, meaning the service can be knocked over.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112807

## From the sources

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_