CVE-2025-59287 1

CVE-2025-59287: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 24, 2025

Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.

Vulnerabilities & Patching