CVE-2025-26651

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-26651
Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26651 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
History

10 Jul 2025, 15:25

Type Values Removed Values Added
First Time Microsoft windows Server 2022
Microsoft windows 11 24h2
Microsoft
Microsoft windows Server 2022 23h2
Microsoft windows 11 23h2
Microsoft windows 11 22h2
Microsoft windows Server 2025
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26651 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26651 - Vendor Advisory
CPE cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*

09 Apr 2025, 20:03

Type Values Removed Values Added
Summary
  • (es) Un método o función peligroso expuesto en el Administrador de sesión local (LSM) de Windows permite a un atacante autorizado denegar servicio a través de una red.

08 Apr 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-08 18:15

Updated : 2025-07-10 15:25

NVD link : CVE-2025-26651

Mitre link : CVE-2025-26651

CVE.ORG link : CVE-2025-26651

JSON object : View

Products Affected

microsoft

  • windows_server_2022
  • windows_11_23h2
  • windows_11_24h2
  • windows_11_22h2
  • windows_server_2025
  • windows_server_2022_23h2
CWE
CWE-749

Exposed Dangerous Method or Function