CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-10-14
Windows Server Update Services (WSUS) Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-59287)
[Affected Scope] All Windows Server environments running Windows Server Update Services (WSUS).
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges over the network by sending malicious serialized payloads.
[Mitigation] Apply the official Microsoft security patches immediately, and restrict network access to WSUS ports (8530, 8531) to trusted internal networks.