March 22, 2024—KB5037423 (OS Build 14393.6799) Out-of-band

Highlights

• This update addresses a known issue that affects the Local Security Authority Subsystem Service (LSASS).

Improvements

This non-security update includes quality improvements. When you install this KB: 

• This update addresses a known issue that affects the Local Security Authority Subsystem Service (LSASS). It might leak memory on domain controllers (DCs). This issue occurs after you install KB5035855 (March 12, 2024). The leak occurs when on-premises and cloud-based Active Directory DCs process Kerberos authentication requests. This substantial leak might cause excessive memory usage. Because of this, LSASS might stop responding, and the DCs will restart when you do not expect it. 

If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device.  

Known issues in this update

Microsoft is not currently aware of any issues with this update.

How to get this update

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU and applying Microsoft security updates. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions. 

If you are using Windows Update, the latest SSU (KB5035962) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog. 

Install this update

File information

For a list of the files that are provided in this update, download the file information for cumulative update 5037423.