CVE-2026-119958

Summary

An out-of-bounds write vulnerability exists in Windows LDAP, allowing an unauthenticated remote attacker to corrupt memory and potentially achieve remote code execution via a malicious LDAP request.

Exploitability

Exploitation is highly likely due to network accessibility (AV:N), low attack complexity (AC:L), and no required privileges or user interaction (PR:N, UI:N).

Blast radius

Successful exploitation could lead to full system compromise of the affected Windows LDAP service host, enabling complete confidentiality, integrity, and availability loss.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version is published in the provided description; apply Microsoft Security Advisory guidance immediately—disable LDAP over untrusted networks or restrict LDAP service access via firewall rules until patching is confirmed.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.