Exploit for Deserialization of Untrusted Data in Microsoft

WSUSResponder v1.0.1 Module PowerShell de réponse à l'inc...

Exploit for CVE-2025-59287

wsus-decoy Defensive proof of concept decoy for CVE-2025-5928...

Exploit for CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-202...

KB5070883: Windows Server 2019 WSUS RCE (CVE-2025-59287)

The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Microsoft Windows Server Update Service WSUS contains a deserialization of untrusted data vulnerability that allows for remote code execution...

Microsoft Windows Server Remote Code Execution Vulnerability (CNVD-2025-26108)

Microsoft Windows Server is a set of server operating systems from the American company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Windows Server, which can be exploited by an attacker to execute arbitrary code on a target system by sending a specially crafted...

Windows Server Update Service Code Execution

The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Patch Tuesday Oct 2025 Fixs 175 Vulnerabilities including 3 Zero-Days

October's Microsoft Patch Tuesday fixes 170+ flaws, including 3 actively exploited zero-days and critical WSUS RCE CVSS 9.8. Immediate patching is mandatory. Final free updates for Windows 10...

CVE-2025-59287

CVE-2025-59287 is a deserialization vulnerability in Windows Server Update Services (WSUS) that enables unauthenticated, remote code execution over the network via crafted data (notably SOAP requests to WSUS endpoints such as Client.asmx). Connected exploit analyses confirm the root cause as unsa...

CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

...

October 24, 2025—KB5070893 (OS Build 26100.6905) Security Update for Windows Server Update Services

None None...

October 24, 2025—KB5070892 (OS Build 20348.4297) Security Update for Windows Server Update Services

None None...

October 23, 2025—KB5070883 (OS Build 17763.7922) Out-of-band

None None...

October 23, 2025—KB5070881 (OS Build 26100.6905) Out-of-band

None None...

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025

None None...

PT-2025-42147

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server Update Services WSUS versions prior to the October 2025 security updates. Description A critical remote code execution RCE vulnerability exists in Windows Server Update Services WSUS due to unsafe deserialization of...

Microsoft Windows Server 代码问题漏洞

Microsoft Windows Server is a set of server operating systems from the American company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Windows Server, which can be exploited by an attacker to execute arbitrary code on a target system by sending a specially crafted...

Windows Server Update Service Deserialization Remote Code Execution

This module exploits deserialization vulnerability in legacy serialization mechanism in Windows Server Update Services WSUS. The vulnerability allows unauthenticated attacker to create specially crafted event, which triggers unsafe deserialization upon server synchronization. The module does not...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...