Skip to content

CVE · Exploited · On CISA KEV

CVE-2025-59287

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

9.8
CVSS 3.1
1
story
OCT 24
added to KEV
Severity
9.8 Critical · vendor score
Vendor
Microsoft
Product
Windows
Published
Oct 14, 2025
Added to KEV
Oct 24, 2025
KEV deadline
Nov 14, 2025
Ransomware use
Unknown
Weakness
CWE-502

What it is

Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesMicrosoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseMicrosoft issued fixes for several actively exploited vulnerabilities in its latest patch Tuesday release.LINDSEY O'DONNELL-WELCH · 2 MIN

Official references

7 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorymsrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287Fixvicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-serviceExploithawktrace.com/blog/CVE-2025-59287Analysisvicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service