CVE-2026-62785
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker could remotely execute code, potentially leading to control of the directory service and the entire environment.
Recommendation
Install the latest Windows security updates for LDAP.
Other vulnerabilities in Windows LDAP
See all- CVE-2024-49113High
A Denial of Service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). Technical details are not provided in the description.
- CVE-2024-49112Critical
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Technical details are not provided in the description.
- CVE-2026-69428High
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- CVE-2026-62795High
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
- CVE-2026-20812Medium
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
- CVE-2024-21356Medium
Denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP). An attacker could cause the LDAP service to crash, preventing access to directories.
Original NVD description (English source)
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS