CVE-2025-59287 Microsoft Windows
Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
- Added
- 2025-10-24
- Federal patch deadline
- 2025-11-14
- Ransomware use
- not known