CVE-2025-26651

Summary

CVE-2025-26651 is a newly disclosed vulnerability affecting Windows Local Session Manager (LSM). This issue grants authorized attackers the ability to cause a denial-of-service (DoS) attack over a network. By exploiting an exposed method or function in LSM, attackers can disrupt the normal functioning of targeted systems, potentially causing significant downtime and inconvenience. The vulnerability poses a threat to organizations and individuals relying on Windows-based systems and networks, and it is essential to apply the relevant patches as soon as they become available to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.