The Update BureauKB5037425: Cumulative update for Windows Server, version 2019, March 2024. LSASS memory leak on domain controllers addressed
In short
The update addresses an LSASS memory leak that could make domain controllers stop responding and restart unexpectedly.
Does it affect you? Applies to: Devices running Windows Server 2019. The LSASS issue affects domain controllers processing Kerberos authentication requests.
Microsoft publishes separate notes for this KB for Windows 10.
What changes
Fix 1 change
Local Security Authority Subsystem Service (LSASS)
-
Addresses an LSASS memory leak on domain controllers that could cause excessive memory use, stop responding, and restart unexpectedly.1
The leak can occur after installing KB5035849 while on-premises and cloud-based Active Directory domain controllers process Kerberos authentication requests.
Improvement 1 change
Servicing stack
For: Windows Server 2019 devices
-
Includes quality improvements to the component that installs Windows updates.2
Includes servicing stack update version 17763.5568.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-03-25
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaced by
- KB5050008
| Version | Build | Channel |
|---|---|---|
| 2019 | 17763.5579 | General availability |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
x64
2019
644.7 MB
Sources
Updated
Cited passages from Microsoft's official notes (2)
-
1.
This substantial leak might cause excessive memory usage. Because of this, LSASS might stop responding, and the DCs will restart when you do not expect it.
support.microsoft.com -
2.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake