Story perspectives

Microsoft Urgently Patches Critical Windows Server Vulnerability

10/24/2025

Summary

Story summary

Microsoft issued an out-of-band security update to address CVE-2025-59287, a critical remote code execution flaw in Windows Server Update Services (WSUS).
The vulnerability affects Windows Server versions 2012 through 2025, enabling code execution without user interaction.
Exploitation was reported after the October 24, 2025 update, as the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-59287 to its Known Exploited Vulnerabilities catalog.

1 of 1

Story summary

Microsoft issued an out-of-band security update to address CVE-2025-59287, a critical remote code execution flaw in Windows Server Update Services (WSUS).
The vulnerability affects Windows Server versions 2012 through 2025, enabling code execution without user interaction.
Exploitation was reported after the October 24, 2025 update, as the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-59287 to its Known Exploited Vulnerabilities catalog.