CNNVD-202601-2089 Information
CNNVD ID
CNNVD-202601-2089
Related CVE
- CNNVD Published: 2026-01-13
Description (Chinese)
Microsoft Windows Local Security Authority Subsystem Service是美国微软（Microsoft）公司的一个内部程序，负责运行Windows系统安全政策。它在用户登录时电脑单机或服务器时，验证用户身份，管理用户密码变更，并产生访问字符。它也会在窗口安全日志中留下应有的记录。 Microsoft Windows Local Security Authority Subsystem Service存在代码问题漏洞。攻击者利用该漏洞导致系统拒绝服务。以下产品和版本受到影响：Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 22H2 for x64-based Systems,Windows 10 Version 22H2 for ARM64-based Systems,Windows 10 Version 22H2 for 32-bit Systems,Windows Server 2025 (Server Core installation),Windows 11 Version 25H2 for ARM64-based Systems,Windows 11 Version 25H2 for x64-based Systems,Windows 11 Version 23H2 for ARM64-based Systems,Windows 11 Version 23H2 for x64-based Systems,Windows Server 2022, 23H2 Edition (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows Server 2008 for 32-bit Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation),Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation)。
Description (English)
Microsoft Windows Local Security Security Service is an internal program of Microsoft United States, which operates the Windows security policy. It verifies the identity of the user, manages the password change and produces access characters when the user logs in. It will also leave a proper record in the window security log. Microsoft Windows Local Security Subsystem Service has a code gap. The attackers used the loophole to cause the system to refuse services. The following products and versions have been affected: Wows for Service, 2 for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Service for Meeting for Service for Service for Service for Service for Meeting for Service for Service for Meeting for Service for Meeting Meeting for Meeting Meeting Meeting Meeting for Meeting Meeting Meeting Meeting for Meeting Meeting Meeting Meeting for Meeting Meeting Meeting Meeting Meeting for Meeting
Hazard Level
Medium
Vulnerability Type
代码问题
Affected Vendor
微软
Published
2026-01-13
Last Modified
2026-02-24
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20875
Patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20875
Share on: