Topic: cve-2025-59287

  • Urgent Microsoft WSUS Flaw Actively Exploited After Patch

    Urgent Microsoft WSUS Flaw Actively Exploited After Patch

    A severe security vulnerability (CVE-2025-59287) in Microsoft's WSUS allows unauthenticated remote code execution with SYSTEM privileges, prompting an urgent out-of-band patch due to incomplete initial fixes. The flaw arises from unsafe deserialization via BinaryFormatter in the `GetCookie()` end...

    Read More »
  • Active Attacks Exploit Critical WSUS Flaw in Windows Server

    Active Attacks Exploit Critical WSUS Flaw in Windows Server

    Actively exploited critical vulnerabilities (CVE-2025-59287) in Windows Server Update Services (WSUS) allow remote code execution and system takeover, requiring immediate emergency patching. Microsoft has released out-of-band security updates for all affected Windows Server versions and recommend...

    Read More »