Windows Local Session Manager (LSM) Denial of Service Vulnerability
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 1.5%
exploitation probability
1.5%top 27% of all CVEs
observed exploitation
nono source reports it
In short
Windows Local Session Manager has a flaw where it doesn't properly validate certain input, allowing an authorized attacker on the network to crash or disable the service, causing a denial of service.
Technical detail
Improper input validation in Windows LSM (CWE-1287) permits an authenticated network attacker to send specially crafted input that triggers a denial of service condition. Requires valid network credentials to exploit; impact is service unavailability.
Summary generated and translated by AI from the official description.
Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C