CVE-2025-59287
Deserialization of untrusted data in Windows Server Update Service allows
Description
Description
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Affected Vendors & Products
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_server_update_service | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
How can this vulnerability impact me? :
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart
Meta Information
CVE Publication Date:
2025-10-14
CVE Last Modified Date:
2025-10-14
Report Generation Date:
2025-10-18
AI Powered Q&A Generation:
2025-10-14
EPSS Last Evaluated Date:
2025-10-16
NVD Report Link: