Microsoft Windows Local Session Manager Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Windows Local Session Manager (LSM). This issue arises from an exposed dangerous method that allows an authorized attacker to disrupt service over the network. The vulnerability affects multiple versions of Windows 11 and Windows Server 2022 and 2025.

Impact

Exploitation of this vulnerability leads to a significant disruption of service, causing affected systems to become unresponsive or unavailable.

Remediation

Users can apply the security update KB5055523 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2022, the security update KB5055526 can be applied.