Microsoft Windows Local Session Manager Denial-of-Service Vulnerability

Vulnerability

A denial-of-service vulnerability has been identified in the Windows Local Session Manager (LSM) across multiple versions and editions. This vulnerability arises from improper validation of certain types of input, allowing an authorized attacker to disrupt service over the network.

Impact

Exploitation of this vulnerability leads to a significant disruption of service, causing a denial-of-service condition on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066791, KB5066793, KB5066835, KB5066872, KB5066873, KB5066874, KB5066875, KB5066876, KB5066877, KB5066586, and KB5066782.

Added: Oct 14, 2025, 7:21 PM
Updated: Oct 14, 2025, 9:41 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
3.3
remediation
7.7
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.