Microsoft Windows SAM Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Windows Security Account Manager (SAM). This issue allows an authenticated attacker to make specially crafted API calls that disrupt service, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, where the system becomes unresponsive or unavailable.

Remediation

Users can apply the security update KB5050009 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2022, 23H2 Edition (Server Core installation), the relevant security update is KB5049984.