IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
9.8Crítica KEV

CVE-2025-59287Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Microsoft Windows Server 2012; Microsoft Windows Server 2012 (Server Core installation); Microsoft Windows Server 2012 R2; Microsoft Windows Server 2012 R2 (Se… Publicada: (hace 1 año)

Explotación conocida — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

CISA confirmó el 24.10.2025 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 14.11.2025.

Acción requerida: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59287 ; https://nvd.nist.gov/vuln/detail/CVE-2025-59287

Descripción

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Debilidad (CWE): CWE-502

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Microsoft Windows Server 2012 6.2.9200.0 – < 6.2.9200.25728
Microsoft Windows Server 2012 R2 6.3.9600.0 – < 6.3.9600.22826
Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.0 – < 6.3.9600.22826
Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.0 – < 6.2.9200.25728
Microsoft Windows Server 2016 10.0.14393.0 – < 10.0.14393.8524
Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.0 – < 10.0.14393.8524
Microsoft Windows Server 2019 10.0.17763.0 – < 10.0.17763.7922
Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.0 – < 10.0.17763.7922
Microsoft Windows Server 2022 10.0.20348.0 – < 10.0.20348.4297
microsoft windows server 2022 23h2 < 10.0.25398.1916
Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.0 – < 10.0.25398.1916
Microsoft Windows Server 2025 10.0.26100.0 – < 10.0.26100.6905
Microsoft Windows Server 2025 (Server Core installation) 10.0.26100.0 – < 10.0.26100.6905
microsoft windows server 23h2 10.0.25398.0 – < 10.0.25398.1916

Referencias y parches

Coincidencias CPE (NVD) (7)
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* < 10.0.14393.8524
  • cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* < 10.0.17763.7922
  • cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* < 10.0.20348.4297
  • cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* < 10.0.25398.1916
  • cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* < 10.0.26100.6905

CVE recientes del mismo producto — Windows Server

9.8Crítica
CVE-2026-105016

Microsoft QUIC Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

1.7%EPSS
6.5Media
CVE-2026-108129

Role: DNS Server Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

1.1%EPSS