KB5037423: Cumulative update for Windows 10, version 1607, March 2024. LSASS memory leak could trigger unexpected domain controller restarts
In short
Addresses an LSASS memory leak on domain controllers. If the leak becomes substantial, LSASS might stop responding and the controllers might restart unexpectedly.
Does it affect you? Applies to: Devices running Windows 10 version 1607, including Windows 10 Enterprise LTSB 2016. The issue concerns domain controllers processing Kerberos authentication requests.
Microsoft publishes separate notes for this KB for Windows Server.
What changes
Fix 1 change
Local Security Authority Subsystem Service (LSASS)
-
Addresses an LSASS memory leak on domain controllers. If the leak becomes substantial, LSASS might stop responding and the controllers might restart unexpectedly.1
The issue occurs after installing KB5035855 and involves on-premises and cloud-based Active Directory domain controllers processing Kerberos authentication requests.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-03-22
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaced by
- KB5046612
| Version | Build | Channel |
|---|---|---|
| 1607 | 14393.6800 | General availability |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
x64
1607
1.6 GB
x86
1607
912.0 MB
Sources
Updated
Cited passages from Microsoft's official notes (1)
-
1.
This substantial leak might cause excessive memory usage. Because of this, LSASS might stop responding, and the DCs will restart when you do not expect it.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake