Microsoft Windows Local Session Manager Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Windows Local Session Manager (LSM) across several versions of Windows Server, Windows 10, and Windows 11. This vulnerability arises from improper validation of certain types of input, allowing an authorized attacker to disrupt service over the network.

Impact

Exploitation of this vulnerability leads to a significant disruption of service, causing systems to become unresponsive or unavailable.

Remediation

Users can apply the security update for this vulnerability, which is included in the October 2025 Monthly Rollup, available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066791, KB5066835, KB5066836, KB5066780, KB5066782, KB5066873, KB5066875, and KB5066586.