CVE-2025-59257

MEDIUM

Windows Local Session Manager - DoS

Title source: llm

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

CVSS v3 6.5

EPSS 0.0021

EPSS Percentile 42.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-1287

Status published

Products (4)

microsoft/windows_11_24h2 < 10.0.26100.6899

microsoft/windows_11_25h2 < 10.0.26200.6899

microsoft/windows_server_2022_23h2 < 10.0.25398.1913

microsoft/windows_server_2025 < 10.0.26100.6899

Published Oct 14, 2025

Tracked Since Feb 18, 2026