CNNVD-202509-1340 Information
CNNVD ID
CNNVD-202509-1340
Related CVE
- CNNVD Published: 2025-09-09
Description (Chinese)
Microsoft Windows Local Security Authority Subsystem Service是美国微软（Microsoft）公司的一个内部程序，负责运行Windows系统安全政策。它在用户登录时电脑单机或服务器时，验证用户身份，管理用户密码变更，并产生访问字符。它也会在窗口安全日志中留下应有的记录。 Microsoft Windows Local Security Authority Subsystem Service存在输入验证错误漏洞。攻击者利用该漏洞导致系统拒绝服务。以下产品和版本受到影响：Windows Server 2025 (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025。
Description (English)
Microsoft Windows Local Security Security Service is an internal program of Microsoft United States, which operates the Windows security policy. It verifies the identity of the user, manages the password change and produces access characters when the user logs in. It will also leave a proper record in the window security log. Microsoft Windows Local Security Subsystem Service has input authentication bugs. The attackers used the loophole to cause the system to refuse services. The following products and versions were affected: Windows Server 2025 (Server Core integration), Windows 11 Version 24H2 for ARM 64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025.
Hazard Level
High
Vulnerability Type
输入验证错误
Affected Vendor
Mida Solutions
Published
2025-09-09
Last Modified
2026-02-24
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53809
Patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53809
Share on: