Microsoft has released critical security updates to address a critical vulnerability in Windows Server Update Services (WSUS). The vulnerability was identified as CVE-2025-59287 and can allow a malicious user to trigger remote code execution.

Microsoft has released security updates for all impacted Windows Server versions and recommends customers to install them as soon as possible:

• Windows Server 2025 (KB5070881)
• Windows Server, version 23H2 (KB5070879)
• Windows Server 2022 (KB5070884)
• Windows Server 2019 (KB5070883)
• Windows Server 2016 (KB5070882)
• Windows Server 2012 R2 (KB5070886)
• Windows Server 2012 (KB5070887)

More information on vulnerability and updates is available on security page – microsoft.com.

Source: bleepingcomputer.com