CVE-2024-49113
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A Denial of Service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). Technical details are not provided in the description.
Risk Assessment
May allow a remote attacker to cause a denial of service in the LDAP service, disrupting authentication and directory services in the organization.
Recommendation
Apply the Windows security updates provided by Microsoft. Restrict network access to the LDAP service to trusted segments.
Other vulnerabilities in Windows LDAP
See all- CVE-2024-49112Critical
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Technical details are not provided in the description.
- CVE-2026-69428High
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- CVE-2026-62795High
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-62785High
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-20812Medium
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
- CVE-2024-21356Medium
Denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). An attacker could cause the LDAP service to crash, preventing access to directories.
Original NVD description (English source)
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS