Critical Windows Flaw ‘LDAPNightmare’ Forces Domain Controllers to Crash and Reboot

A proof-of-concept exploit named "LDAPNightmare" has been released for a recently patched Windows LDAP vulnerability (CVE-2024-49113, CVSS 7.5). The exploit can trigger system-wide denial-of-service attacks on unpatched Windows Servers by causing LSASS crashes through specially crafted DCE...