CVE-2022-44684

Medium

Description

Windows Local Session Manager (LSM) Denial of Service Vulnerability

SeverityMedium
CVSS6.5
Exploit probability—
ProductMicrosoft Windows
PublishedDec 20, 2023
First seenDec 20, 2023

How to fix

Update
  • microsoft windows_10_20h210.0.19042.2364 or later
  • microsoft windows_10_21h110.0.19043.2364 or later
  • microsoft windows_10_21h210.0.19044.2364 or later
  • microsoft windows_10_22h210.0.19045.2364 or later
  • microsoft windows_11_21h210.0.22000.1335 or later
  • microsoft windows_11_22h210.0.22621.993 or later

Affected products

ProductAffected versionsFixed in
microsoft windows_10_20h2v < 10.0.19042.236410.0.19042.2364
microsoft windows_10_21h1v < 10.0.19043.236410.0.19043.2364
microsoft windows_10_21h2v < 10.0.19044.236410.0.19044.2364
microsoft windows_10_22h2v < 10.0.19045.236410.0.19045.2364
microsoft windows_11_21h2v < 10.0.22000.133510.0.22000.1335
microsoft windows_11_22h2v < 10.0.22621.99310.0.22621.993
microsoft windows_server_2022No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.