Shahak Morag

Name of the Vulnerable Software and Affected Versions: Windows Netlogon (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Netlogon can allow an unauthorized attacker to cause a denial of service over a network. This denial-of-service vulnerability allows attackers to affect the system. The vulnerability is related to uncontrolled resource usage. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler Components (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Print Spooler Components can allow an attacker to cause a denial of service. Exploitation may allow a remote attacker to cause a system outage. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

An uncontrolled resource consumption issue in the Windows Local Security Authority Subsystem Service (LSASS) can allow an unauthorized attacker to cause a denial of service over a network. This issue enables attackers to disrupt system functionality. Reports indicate that the vulnerability, identified as CVE-2025-32724, is being exploited by 'win-dDoS' to compromise domain controllers and use them as DDoS botnet participants, potentially affecting up to 10,000 domain controllers. The exploitation leverages LDAP referrals and does not require credentials.

Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol (LDAP) (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Lightweight Directory Access Protocol (LDAP) allows an unauthorized attacker to cause a denial of service over a network. The vulnerability is related to uncontrolled resource usage within the LDAP implementation. Exploitation may allow a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.