CVE-2026-40378

The vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to exploit excessive memory allocation, leading to potential denial of service over the network. This high-severity issue poses significant risks to system availability and should be prioritized by organizations using Windows systems, particularly those with critical infrastructure or sensitive data. Immediate remediation is recommended to mitigate the risk of service disruption.