THREAT OPS › CVEs › CVE-2025-59287
CVE-2025-59287 — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.
Vulnerability details
- Affected productsWindows
- KEV remediation due2025-11-14
Related reporting
- JSAC2026 -Day 2-jpcert_blog