Windows Server 2025 administrators may need to disable Lock Pages in Memory (LPIM) to stop SQL Server crashes linked to a change in the system’s memory-management behavior. Microsoft has not yet released a permanent fix for applications using Address Windowing Extensions (AWE), so disabling LPIM remains a potentially costly workaround.

Source

CrowdStrike is investigating FalconFlank, a public proof-of-concept that allegedly enables local privilege escalation through Falcon Sensor’s Microsoft Office malicious-macro remediation workflow. Until the investigation is complete, the company recommends disabling the “Microsoft Office File Suspicious Macro Removal” Windows policy setting on affected Windows 11 25H2 and Windows Server 2025 systems.

Source