Microsoft Web Threat Defense Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Web Threat Defense (WTD.sys), allowing an unauthorized attacker to cause a service disruption over the network. This issue arises from an out-of-bounds read, which can be exploited to create a significant impact on availability.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing a significant disruption of service over the network.

Remediation

Microsoft has released HotPatch KB5061258 for Windows 11 Version 24H2 (both x64 and ARM64-based Systems) to address this vulnerability. Customers should install this HotPatch update to be protected. For Windows 11 Version 22H2 and 23H2, the regular security update KB5058405 can be applied.