Skip to the content
The Update Bureau
Windows Server 2016 Windows Server 2016 Out-of-band update
Out-of-band

KB5037423

KB5037423: Cumulative update for Windows Server, version 2016, March 2024. LSASS memory leak on domain controllers addressed

In short

Addresses an LSASS memory leak that can cause domain controllers to stop responding and restart unexpectedly after KB5035855.

Does it affect you? Applies to: Devices running Windows Server 2016. The addressed issue affects domain controllers processing Kerberos authentication requests.

Build
14393.6800
Restart
Required

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Fix 1 change

Local Security Authority Subsystem Service (LSASS)

  • Addresses a memory leak on domain controllers that can cause LSASS to stop responding and the servers to restart unexpectedly. The issue occurs after KB5035855 when Active Directory domain controllers process Kerberos authentication requests.1
    The leak affects on-premises and cloud-based Active Directory domain controllers.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-03-22
Classification
Updates
Type
Cumulative update
Restart
Required
Replaced by
KB5046612
VersionBuildChannel
2016 14393.6800 General availability

Security

No vulnerabilities are listed for this update.

Sources

Updated
Cited passages from Microsoft's official notes (1)
  1. 1. This substantial leak might cause excessive memory usage. Because of this, LSASS might stop responding, and the DCs will restart when you do not expect it. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake