CVE-2025-59287 | Microsoft Windows Server 2012 up to Server 2022 23H2 Server Update Service deserialization

October 14, 2025 Yanac

A vulnerability was found in Microsoft Windows Server 2012 up to Server 2022 23H2. It has been classified as very critical. This affects an unknown part of the component Server Update Service. Performing manipulation results in deserialization.

This vulnerability was named CVE-2025-59287. The attack may be initiated remotely. There is no available exploit.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More