Skip to main content

CVE-2026-34339

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service vulnerability

Microsoft

MSRC advisory May 12, 2026

Alert details

Source feed
Microsoft MSRC
CVE ID
CVE-2026-34339
Affected products
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service · Microsoft Windows Lightweight Directory Access Protocol (LDAP) Denial of Service · Microsoft

What happened

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally.

What it means for your business

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service vulnerability (CVE-2026-34339) was added to Microsoft’s security update guidance. Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.

EPSS probability

0.29%

Sources

Related briefs

Microsoft MSRC

CVE-2026-68801

Microsoft Excel Remote Code Execution vulnerability

Microsoft Excel Remote Code Execution vulnerability (CVE-2026-68801) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64903

Microsoft Office Remote Code Execution vulnerability

Microsoft Office Remote Code Execution vulnerability (CVE-2026-64903) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64899

Microsoft Office Information Disclosure vulnerability

Microsoft Office Information Disclosure vulnerability (CVE-2026-64899) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-58547

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege vulnerability

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege vulnerability (CVE-2026-58547) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.