Microsoft Windows TCP/IP Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the TCP/IP stack of Microsoft Windows. This issue arises from an incorrect calculation of buffer sizes, which allows an authorized attacker to disrupt services over an adjacent network. The vulnerability affects multiple Windows products and versions, including various editions of Windows 10, Windows 11, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability leads to a significant denial-of-service condition, causing affected systems to become unresponsive or unavailable.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094125, KB5094126, KB5094127, KB5094128, and KB5095051.