Windows Local Session Manager (LSM) Denial of Service Vulnerability

Summary

Details

Vulnerabilities 1

• Medium 6.5
  CVE-2025-59257

  Windows Local Session Manager (LSM) Denial of Service Vulnerability

  Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

  Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 24H2 Windows
  Oct 14, 2025

Revision history

1. 2025-10-14 #1

   Information published.

References

• CVE-2025-59257 Windows Local Session Manager (LSM) Denial of Service Vulnerability - HTML
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59257
• Microsoft Exploitability Index
  https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
• Microsoft Support Lifecycle
  https://support.microsoft.com/lifecycle
• Common Vulnerability Scoring System
  https://www.first.org/cvss