{"id":"CVE-2026-112975","kind":"vulnerability","aliases":["CVE-2026-112975"],"related":[],"title":"Windows: LLDP pointer flaw lets an adjacent attacker crash networking","description":"Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny service over an adjacent network.","summary":"An untrusted pointer dereference in the Windows Link-Layer Discovery Protocol (LLDP) implementation lets an unauthorized attacker on the same network segment cause a denial of service. The sources describe only a denial of service, not code execution or data access.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","lldp","network","windows"],"not_affected_if":["no-adjacent-untrusted-network","non-windows-hosts"],"how_to_check":"- Check the Windows build with `winver` or `systeminfo` and compare it to the fixed build in Microsoft's advisory\n- Check whether LLDP is in use on the host or on its switch ports (unknown from the sources how to confirm this on a given host)","fix":null,"status":"open","published_at":"2026-11-10T19:18:48+00:00","first_seen_at":"2026-11-10T19:24:36+00:00","triaged_at":"2026-11-10T20:02:34+00:00","updated_at":"2026-11-10T20:02:34+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:02:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows: LLDP pointer flaw lets an adjacent attacker crash networking","impact":"low","summary":"An untrusted pointer dereference in the Windows Link-Layer Discovery Protocol (LLDP) implementation lets an unauthorized attacker on the same network segment cause a denial of service. The sources describe only a denial of service, not code execution or data access.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","lldp","network"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Service on the affected Windows host is denied through a crash","analyst_note":"Find Microsoft's advisory for CVE-2026-112975 to confirm affected Windows builds, the fixed builds and whether LLDP is on by default.","how_to_check":"- Check the Windows build with `winver` or `systeminfo` and compare it to the fixed build in Microsoft's advisory\n- Check whether LLDP is in use on the host or on its switch ports (unknown from the sources how to confirm this on a given host)","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["non-windows-hosts","no-adjacent-untrusted-network"],"who_is_affected":"Windows machines that process LLDP frames from an adjacent network segment are the exposed systems. The sources do not state which Windows versions are affected or whether LLDP is enabled by default, so the affected configuration is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00073,"input_tokens":4522,"output_tokens":556,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112975':13A,16A '-2026':12A,15A 'access':62B 'adjac':7A,83C 'allow':74C 'attack':8A,38B,77C 'caus':44B 'code':58B 'crash':9A 'cve':11A,14A 'data':61B 'deni':79C 'denial':46B,54B 'derefer':24B,65C 'describ':51B 'discoveri':31B,71C 'execut':59B 'flaw':4A 'implement':34B 'infrastructur':17B 'layer':30B,70C 'let':5A,35B 'link':29B,69C 'link-lay':28B,68C 'lldp':2A,18B,33B,73C 'network':10A,19B,42B,84C 'pointer':3A,23B,64C 'protocol':32B,72C 'segment':43B 'servic':48B,56B,80C 'sourc':50B 'unauthor':37B,76C 'untrust':22B,63C 'window':1A,20B,27B,67C","nicknames":[],"mitigations":[],"who_affected":"Windows machines that process LLDP frames from an adjacent network segment are the exposed systems. The sources do not state which Windows versions are affected or whether LLDP is enabled by default, so the affected configuration is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","lldp","medium","network","windows"],"campaign_type":null,"search_a":"'-112975':13A,16A '-2026':12A,15A 'adjac':7A 'attack':8A 'crash':9A 'cve':11A,14A 'flaw':4A 'let':5A 'lldp':2A 'network':10A 'pointer':3A 'window':1A","search_b":"'access':62B 'attack':38B 'caus':44B 'code':58B 'data':61B 'denial':46B,54B 'derefer':24B 'describ':51B 'discoveri':31B 'execut':59B 'implement':34B 'infrastructur':17B 'layer':30B 'let':35B 'link':29B 'link-lay':28B 'lldp':18B,33B 'network':19B,42B 'pointer':23B 'protocol':32B 'segment':43B 'servic':48B,56B 'sourc':50B 'unauthor':37B 'untrust':22B 'window':20B,27B","search_c":"'adjac':83C 'allow':74C 'attack':77C 'deni':79C 'derefer':65C 'discoveri':71C 'layer':70C 'link':69C 'link-lay':68C 'lldp':73C 'network':84C 'pointer':64C 'protocol':72C 'servic':80C 'unauthor':76C 'untrust':63C 'window':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112975","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112975","severity":null,"published_at":"2026-11-10T19:18:48+00:00","modified_at":"2026-11-10T19:18:49+00:00","first_seen_at":"2026-11-10T19:24:36+00:00","fetched_at":"2026-11-10T19:24:36+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}