Product:
Windows Local Session Manager
Summary
Improper validation of specified type of input in Windows Local Session Manager allows an authorized attacker to deny service over a network. This vulnerability can lead to significant disruption of services. Attackers with low privileges can exploit this flaw to impact availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-58729 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the network and can send specially crafted input to the Windows Local Session Manager. By doing so, they can trigger a denial of service condition, effectively disrupting the services provided by the affected system.
Affected Products
- Windows Local Session Manager: Vulnerable to denial of service due to improper input validation.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring for unusual activity can also help in reducing the risk of exploitation.