CVE-2025-59287 | THREATINT

Description

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

PUBLISHED Reserved 2025-09-11 | Published 2025-10-14 | Updated 2025-11-22 | Assigner microsoft

CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CISA Known Exploited Vulnerability

Date added 2025-10-24 | Due date 2025-11-14

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Problem types

CWE-502: Deserialization of Untrusted Data

Product status

10.0.17763.0 (custom) before 10.0.17763.7922

affected

10.0.17763.0 (custom) before 10.0.17763.7922

affected

10.0.20348.0 (custom) before 10.0.20348.4297

affected

10.0.26100.0 (custom) before 10.0.26100.6905

affected

10.0.25398.0 (custom) before 10.0.25398.1916

affected

10.0.26100.0 (custom) before 10.0.26100.6905

affected

10.0.14393.0 (custom) before 10.0.14393.8524

affected

10.0.14393.0 (custom) before 10.0.14393.8524

affected

6.2.9200.0 (custom) before 6.2.9200.25728

affected

6.2.9200.0 (custom) before 6.2.9200.25728

affected

6.3.9600.0 (custom) before 6.3.9600.22826

affected

6.3.9600.0 (custom) before 6.3.9600.22826

affected

References

gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951 exploit

www.cisa.gov/...erabilities-catalog?field_cve=CVE-2025-59287 (CISA KEV) government-resource

www.bleepingcomputer.com/...-wsus-flaw-exploited-in-attacks/

hawktrace.com/blog/CVE-2025-59287

www.vicarius.io/...rability-in-windows-server-update-service

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287 (Windows Server Update Service (WSUS) Remote Code Execution Vulnerability) vendor-advisory

cve.org (CVE-2025-59287)

nvd.nist.gov (CVE-2025-59287)

Download JSON