You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
lldp vulnerability
About this tag
The lldp vulnerability tag covers security flaws in the Windows Link-Layer Discovery Protocol (LLDP), a Layer 2 network protocol used for device discovery. The primary content discusses CVE-2026-34341, a Microsoft-disclosed elevation-of-privilege vulnerability rated Important. This bug involves a double-free condition that a low-privileged local attacker can exploit, combined with a race condition, to gain SYSTEM privileges on affected Windows clients and servers. Microsoft's scoring indicates the flaw is local, high-complexity, not publicly disclosed, and not known to be exploited. The tag highlights how LLDP, as a quiet plumbing component, joins other Windows subsystems that can escalate a foothold to full machine control, emphasizing the importance of patching for defenders.
Microsoft disclosed CVE-2026-34341 on May 12, 2026, as an Important Windows Link-Layer Discovery Protocol elevation-of-privilege flaw in which a low-privileged local attacker could exploit a double-free condition, win a race condition, and gain SYSTEM privileges on affected Windows clients and...