Executive brief
A security vulnerability exists in the Windows Link-Layer Discovery Protocol (LLDP), a networking component used by devices to advertise their identity and capabilities on a local network. An attacker who already has basic access to a system could exploit this flaw to gain full administrative control. This could allow them to steal sensitive data, install persistent malware, or disrupt business operations on the affected machine.
Technical details
A double-free vulnerability (CWE-415) exists within the Windows Link-Layer Discovery Protocol (LLDP) implementation. The flaw is triggered when the system attempts to free the same memory location twice, leading to potential memory corruption. An attacker with low-privileged local access can exploit this condition to execute arbitrary code with elevated privileges. While the attack vector is local, the complexity is rated as high, suggesting specific timing or system states are required for successful exploitation. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows
Timeline
- 2026-05-12: advisory: Initial disclosure by Microsoft and NVD.