Vulnerability-Lookup

CVE-2025-59287 (GCVE-0-2025-59287)

Vulnerability from cvelistv5 – Published: 2025-10-14 17:01 – Updated: 2026-02-26 16:58

CISA Previdian

Title

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Summary

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-10-25 03:56 UTC

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

microsoft mitre root Scorecard

References

7 references

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch
https://gist.github.com/hawktrace/880b54fb9c07ddb…	exploit
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
https://www.bleepingcomputer.com/news/security/ci…
https://hawktrace.com/blog/CVE-2025-59287
https://www.vicarius.io/vsociety/posts/cve-2025-5…
https://www.vicarius.io/vsociety/posts/cve-2025-5…

Impacted products

12 products

Vendor	Product	Version
Microsoft	Windows Server 2012	Affected: 6.2.9200.0 , < 6.2.9200.25728 (custom)
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.9200.0 , < 6.2.9200.25728 (custom)
Microsoft	Windows Server 2012 R2	Affected: 6.3.9600.0 , < 6.3.9600.22826 (custom)
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.9600.0 , < 6.3.9600.22826 (custom)
Microsoft	Windows Server 2016	Affected: 10.0.14393.0 , < 10.0.14393.8524 (custom)
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.14393.0 , < 10.0.14393.8524 (custom)
Microsoft	Windows Server 2019	Affected: 10.0.17763.0 , < 10.0.17763.7922 (custom)
Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.17763.0 , < 10.0.17763.7922 (custom)
Microsoft	Windows Server 2022	Affected: 10.0.20348.0 , < 10.0.20348.4297 (custom)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	Affected: 10.0.25398.0 , < 10.0.25398.1916 (custom)
Microsoft	Windows Server 2025	Affected: 10.0.26100.0 , < 10.0.26100.6905 (custom)
Microsoft	Windows Server 2025 (Server Core installation)	Affected: 10.0.26100.0 , < 10.0.26100.6905 (custom)

Date Public

2025-10-14 14:00

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: e8ae5817-180c-4961-ad08-0a3719426552

Vulnerability ID: CVE-2025-59287

Status: Confirmed

Status Updated: 2025-10-24 02:00 CEST

Exploited: Yes

Timestamps

First Seen: 2025-10-24

Asserted: 2025-10-24

Scope

Notes: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | Affected: Microsoft / Windows | Description: Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2025-11-14 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59287 ; https://nvd.nist.gov/vuln/detail/CVE-2025-59287

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-502
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	Windows
Due Date	2025-11-14
Date Added	2025-10-24
Vendorproject	Microsoft
Vulnerabilityname	Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2025-59287

Created: 2026-10-02 08:09 CEST | Updated: 2026-10-02 08:09 CEST

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: db5e70a8-e2cf-45a2-bf8b-7843d58ad2af

Vulnerability ID: CVE-2025-59287

Status: Confirmed

Status Updated: 2026-06-01 12:42 CEST

Exploited: Yes

Timestamps

First Seen: 2026-06-01

Asserted: 2026-06-01

Scope

Notes: Windows Server Update Service (WSUS) Remote Code Execution Vulnerability | Affected: Microsoft / Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | CVSS: 9.8 (CRITICAL) | EPSS: 0.9998 | Used in malware: unknown | Listed 1 day ahead of CISA KEV | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: previdian

Details

Feed	Previdian (previdian.com)
Title	Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Cve Id	CVE-2025-59287
Vendor	Microsoft
Ghsa Id	None
Product	Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)
Added Date	2026-06-01T10:42:54.681Z
Cvss Score	9.8
Epss Score	0.9998
Previous Ids
Cvss Severity	CRITICAL
Virtual Patch	False
Cvss Estimated	False
Epss Percentile	0.99981
Used In Malware	unknown
Vulnerability Id	CVE-2025-59287
Ahead Of Cisa Kev	`{ "count": 1, "unit": "day" }`
Not Yet In Cisa Kev	False

References

Created: 2026-10-02 09:10 CEST | Updated: 2026-10-02 09:10 CEST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-59287",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-25T03:56:03.912708Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-10-24",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:58:01.519Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2025-10-24T00:00:00.000Z",
            "value": "CVE-2025-59287 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-11T15:00:23.270Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-windows-server-wsus-flaw-exploited-in-attacks/"
          },
          {
            "url": "https://hawktrace.com/blog/CVE-2025-59287"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-service"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25728",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25728",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22826",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22826",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8524",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8524",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7922",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7922",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.4297",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1916",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.6905",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.6905",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7922",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.17763.7922",
                  "versionStartIncluding": "10.0.17763.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.20348.4297",
                  "versionStartIncluding": "10.0.20348.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.6905",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.25398.1916",
                  "versionStartIncluding": "10.0.25398.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.26100.6905",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8524",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14393.8524",
                  "versionStartIncluding": "10.0.14393.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25728",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.2.9200.25728",
                  "versionStartIncluding": "6.2.9200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22826",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "6.3.9600.22826",
                  "versionStartIncluding": "6.3.9600.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-10-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-22T17:26:07.844Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Windows Server Update Service (WSUS) Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287"
        }
      ],
      "title": "Windows Server Update Service (WSUS) Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-59287",
    "datePublished": "2025-10-14T17:01:47.629Z",
    "dateReserved": "2025-09-11T19:36:03.690Z",
    "dateUpdated": "2026-02-26T16:58:01.519Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-59287",
      "date": "2026-10-02",
      "epss": "0.9998",
      "percentile": "0.99981"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2012",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "6.2.9200.25728",
                    "status": "affected",
                    "version": "6.2.9200.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2012 (Server Core installation)",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "6.2.9200.25728",
                    "status": "affected",
                    "version": "6.2.9200.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2012 R2",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "6.3.9600.22826",
                    "status": "affected",
                    "version": "6.3.9600.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2012 R2 (Server Core installation)",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "6.3.9600.22826",
                    "status": "affected",
                    "version": "6.3.9600.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2016",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "10.0.14393.8524",
                    "status": "affected",
                    "version": "10.0.14393.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2016 (Server Core installation)",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "10.0.14393.8524",
                    "status": "affected",
                    "version": "10.0.14393.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2019",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "10.0.17763.7922",
                    "status": "affected",
                    "version": "10.0.17763.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2019 (Server Core installation)",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "10.0.17763.7922",
                    "status": "affected",
                    "version": "10.0.17763.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2022",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "10.0.20348.4297",
                    "status": "affected",
                    "version": "10.0.20348.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "10.0.25398.1916",
                    "status": "affected",
                    "version": "10.0.25398.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2025",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "10.0.26100.6905",
                    "status": "affected",
                    "version": "10.0.26100.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "platforms": [
                  "x64-based Systems"
                ],
                "product": "Windows Server 2025 (Server Core installation)",
                "vendor": "Microsoft",
                "versions": [
                  {
                    "lessThan": "10.0.26100.6905",
                    "status": "affected",
                    "version": "10.0.26100.0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "secure@microsoft.com"
          }
        ],
        "cisaActionDue": "2025-11-14",
        "cisaExploitAdd": "2025-10-24",
        "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
        "cisaVulnerabilityName": "Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability",
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7200EF9B-2689-4E9E-BE9E-E00836A7D284",
                    "versionEndExcluding": "10.0.14393.8524",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9DDF9BE-8D0B-4027-B3F7-FFD96438E3EB",
                    "versionEndExcluding": "10.0.17763.7922",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BDAC36D7-54A0-456B-B176-17A0B9E63C7A",
                    "versionEndExcluding": "10.0.20348.4297",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FBA85BFD-9802-452E-97B1-6380554EF254",
                    "versionEndExcluding": "10.0.25398.1916",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2E5FFF5B-8745-47F6-A0B7-262AA43353BB",
                    "versionEndExcluding": "10.0.26100.6905",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network."
          }
        ],
        "id": "CVE-2025-59287",
        "lastModified": "2026-06-17T09:45:52.480",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "secure@microsoft.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-59287",
                "options": [
                  {
                    "exploitation": "active"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-25T03:56:03.912708Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-10-14T17:16:11.670",
        "references": [
          {
            "source": "secure@microsoft.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://hawktrace.com/blog/CVE-2025-59287"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Press/Media Coverage"
            ],
            "url": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-windows-server-wsus-flaw-exploited-in-attacks/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mitigation",
              "Third Party Advisory"
            ],
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-service"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "Third Party Advisory",
              "US Government Resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287"
          }
        ],
        "sourceIdentifier": "secure@microsoft.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-502"
              }
            ],
            "source": "secure@microsoft.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-11-11T15:00:23.270Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-windows-server-wsus-flaw-exploited-in-attacks/"
              },
              {
                "url": "https://hawktrace.com/blog/CVE-2025-59287"
              },
              {
                "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service"
              },
              {
                "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-service"
              }
            ],
            "title": "CVE Program Container",
            "x_generator": {
              "engine": "ADPogram 0.0.1"
            }
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-59287",
                    "options": [
                      {
                        "Exploitation": "active"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-10-25T03:56:03.912708Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              },
              {
                "other": {
                  "content": {
                    "dateAdded": "2025-10-24",
                    "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287"
                  },
                  "type": "kev"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-10-20T12:44:47.859Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951"
              },
              {
                "tags": [
                  "government-resource"
                ],
                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2025-10-24T00:00:00.000Z",
                "value": "CVE-2025-59287 added to CISA KEV"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2012",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "6.2.9200.25728",
                  "status": "affected",
                  "version": "6.2.9200.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2012 (Server Core installation)",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "6.2.9200.25728",
                  "status": "affected",
                  "version": "6.2.9200.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2012 R2",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "6.3.9600.22826",
                  "status": "affected",
                  "version": "6.3.9600.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2012 R2 (Server Core installation)",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "6.3.9600.22826",
                  "status": "affected",
                  "version": "6.3.9600.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2016",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "10.0.14393.8524",
                  "status": "affected",
                  "version": "10.0.14393.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2016 (Server Core installation)",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "10.0.14393.8524",
                  "status": "affected",
                  "version": "10.0.14393.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2019",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "10.0.17763.7922",
                  "status": "affected",
                  "version": "10.0.17763.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2019 (Server Core installation)",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "10.0.17763.7922",
                  "status": "affected",
                  "version": "10.0.17763.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2022",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "10.0.20348.4297",
                  "status": "affected",
                  "version": "10.0.20348.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "10.0.25398.1916",
                  "status": "affected",
                  "version": "10.0.25398.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2025",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "10.0.26100.6905",
                  "status": "affected",
                  "version": "10.0.26100.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "platforms": [
                "x64-based Systems"
              ],
              "product": "Windows Server 2025 (Server Core installation)",
              "vendor": "Microsoft",
              "versions": [
                {
                  "lessThan": "10.0.26100.6905",
                  "status": "affected",
                  "version": "10.0.26100.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.0.17763.7922",
                      "versionStartIncluding": "10.0.17763.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.0.17763.7922",
                      "versionStartIncluding": "10.0.17763.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.0.20348.4297",
                      "versionStartIncluding": "10.0.20348.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.0.26100.6905",
                      "versionStartIncluding": "10.0.26100.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.0.25398.1916",
                      "versionStartIncluding": "10.0.25398.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.0.26100.6905",
                      "versionStartIncluding": "10.0.26100.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.0.14393.8524",
                      "versionStartIncluding": "10.0.14393.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.0.14393.8524",
                      "versionStartIncluding": "10.0.14393.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                      "versionEndExcluding": "6.2.9200.25728",
                      "versionStartIncluding": "6.2.9200.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*",
                      "versionEndExcluding": "6.2.9200.25728",
                      "versionStartIncluding": "6.2.9200.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                      "versionEndExcluding": "6.3.9600.22826",
                      "versionStartIncluding": "6.3.9600.0",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*",
                      "versionEndExcluding": "6.3.9600.22826",
                      "versionStartIncluding": "6.3.9600.0",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "datePublic": "2025-10-14T14:00:00.000Z",
          "descriptions": [
            {
              "lang": "en-US",
              "value": "Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en-US",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-502",
                  "description": "CWE-502: Deserialization of Untrusted Data",
                  "lang": "en-US",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-02-22T17:26:07.844Z",
            "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            "shortName": "microsoft"
          },
          "references": [
            {
              "name": "Windows Server Update Service (WSUS) Remote Code Execution Vulnerability",
              "tags": [
                "vendor-advisory",
                "patch"
              ],
              "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287"
            }
          ],
          "title": "Windows Server Update Service (WSUS) Remote Code Execution Vulnerability"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "assignerShortName": "microsoft",
        "cveId": "CVE-2025-59287",
        "datePublished": "2025-10-14T17:01:47.629Z",
        "dateReserved": "2025-09-11T19:36:03.690Z",
        "dateUpdated": "2026-02-26T16:58:01.519Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2025-12999 (CVE-2025-59287)

Vulnerability from fstec – Published: 2025-10-16 – Updated: 2025-10-29 – View on bdu.fstec.ru Exploit publicly available Yes Fixed

CISA Previdian

Title

Уязвимость сервера обновлений Windows Server Update Service (WSUS) операционных систем Windows, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость сервера обновлений Windows Server Update Service (WSUS) операционных систем Windows связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код

Severity

10.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 (Critical) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Yes

Remediation

Software update

CWE

CWE-502 - Восстановление в памяти недостоверных данных

Aliases

CVE-2025-59287

References

3 references

URL
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287
https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
https://hawktrace.com/blog/CVE-2025-59287

Impacted products

13 products from 1 vendor

Vendors

Microsoft Corp

Products

Windows Server 2012 R2 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 (Server Core installation), Windows Server 2012, Windows Server 2016 (Server Core installation), Windows Server 2016, Windows Server 2025, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2022 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2019

Versions

до 6.3.9600.22824 (Windows Server 2012 R2 (Server Core installation)), до 6.3.9600.22824 (Windows Server 2012 R2), до 6.2.9200.25722 (Windows Server 2012 (Server Core installation)), до 6.2.9200.25722 (Windows Server 2012), до 10.0.14393.8519 (Windows Server 2016 (Server Core installation)), до 10.0.14393.8519 (Windows Server 2016), до 10.0.26100.6899 (Windows Server 2025), до 10.0.25398.1913 (Windows Server 2022, 23H2 Edition (Server Core installation)), до 10.0.26100.6899 (Windows Server 2025 (Server Core installation)), до 10.0.20348.4294 (Windows Server 2022 (Server Core installation)), до 10.0.20348.4294 (Windows Server 2022), до 10.0.17763.7919 (Windows Server 2019 (Server Core installation)), до 10.0.17763.7919 (Windows Server 2019)

Product types

Operating system

Platforms

Microsoft Corp Windows Server 2012 R2 (Server Core installation) до 6.3.9600.22824, Microsoft Corp Windows Server 2012 R2 до 6.3.9600.22824, Microsoft Corp Windows Server 2012 (Server Core installation) до 6.2.9200.25722, Microsoft Corp Windows Server 2012 до 6.2.9200.25722, Microsoft Corp Windows Server 2016 (Server Core installation) до 10.0.14393.8519, Microsoft Corp Windows Server 2016 до 10.0.14393.8519, Microsoft Corp Windows Server 2025 до 10.0.26100.6899, Microsoft Corp Windows Server 2022, 23H2 Edition (Server Core installation) до 10.0.25398.1913, Microsoft Corp Windows Server 2025 (Server Core installation) до 10.0.26100.6899, Microsoft Corp Windows Server 2022 (Server Core installation) до 10.0.20348.4294, Microsoft Corp Windows Server 2022 до 10.0.20348.4294, Microsoft Corp Windows Server 2019 (Server Core installation) до 10.0.17763.7919, Microsoft Corp Windows Server 2019 до 10.0.17763.7919

Mitigations

Использование рекомендаций: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287

Remediation

TO2317 Накопительное обновление для Windows Server 2019 для x64 систем (KB5066586), TO2318 Накопительное обновление для Windows Server 2016 для x64 систем (KB5066836), TO2319 Накопительное обновление для Windows Server 2019 для x64 систем (KB5066586), TO2345 Накопительное обновление для Windows Server 2019 для x64 систем (KB5070883), TO2346 Накопительное обновление для Windows Server 2022 21H2 для x64 систем (KB5070884), TO2363 Накопительное обновление для Windows Server 2019 для x64 систем (KB5070883)

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO2317, TO2318, TO2319, TO2345, TO2346, TO2363",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO2317 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows Server 2019 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5066586), TO2318 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows Server 2016 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5066836), TO2319 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows Server 2019 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5066586), TO2345 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows Server 2019 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5070883), TO2346 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows Server 2022 21H2 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5070884), TO2363 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows Server 2019 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5070883)",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 6.3.9600.22824 (Windows Server 2012 R2 (Server Core installation)), \u0434\u043e 6.3.9600.22824 (Windows Server 2012 R2), \u0434\u043e 6.2.9200.25722 (Windows Server 2012 (Server Core installation)), \u0434\u043e 6.2.9200.25722 (Windows Server 2012), \u0434\u043e 10.0.14393.8519 (Windows Server 2016 (Server Core installation)), \u0434\u043e 10.0.14393.8519 (Windows Server 2016), \u0434\u043e 10.0.26100.6899 (Windows Server 2025), \u0434\u043e 10.0.25398.1913 (Windows Server 2022, 23H2 Edition (Server Core installation)), \u0434\u043e 10.0.26100.6899 (Windows Server 2025 (Server Core installation)), \u0434\u043e 10.0.20348.4294 (Windows Server 2022 (Server Core installation)), \u0434\u043e 10.0.20348.4294 (Windows Server 2022), \u0434\u043e 10.0.17763.7919 (Windows Server 2019 (Server Core installation)), \u0434\u043e 10.0.17763.7919 (Windows Server 2019)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.10.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "29.10.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "16.10.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-12999",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-59287",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Windows Server 2012 R2 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 (Server Core installation), Windows Server 2012, Windows Server 2016 (Server Core installation), Windows Server 2016, Windows Server 2025, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2022 (Server Core installation), Windows Server 2022, Windows Server 2019 (Server Core installation), Windows Server 2019",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows Server 2012 R2 (Server Core installation) \u0434\u043e 6.3.9600.22824 , Microsoft Corp Windows Server 2012 R2 \u0434\u043e 6.3.9600.22824 , Microsoft Corp Windows Server 2012 (Server Core installation) \u0434\u043e 6.2.9200.25722 , Microsoft Corp Windows Server 2012 \u0434\u043e 6.2.9200.25722 , Microsoft Corp Windows Server 2016 (Server Core installation) \u0434\u043e 10.0.14393.8519 , Microsoft Corp Windows Server 2016 \u0434\u043e 10.0.14393.8519 , Microsoft Corp Windows Server 2025 \u0434\u043e 10.0.26100.6899 , Microsoft Corp Windows Server 2022, 23H2 Edition (Server Core installation) \u0434\u043e 10.0.25398.1913 , Microsoft Corp Windows Server 2025 (Server Core installation) \u0434\u043e 10.0.26100.6899 , Microsoft Corp Windows Server 2022 (Server Core installation) \u0434\u043e 10.0.20348.4294 , Microsoft Corp Windows Server 2022 \u0434\u043e 10.0.20348.4294 , Microsoft Corp Windows Server 2019 (Server Core installation) \u0434\u043e 10.0.17763.7919 , Microsoft Corp Windows Server 2019 \u0434\u043e 10.0.17763.7919 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Windows Server Update Service (WSUS) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-502)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Windows Server Update Service (WSUS) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287\nhttps://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv\nhttps://hawktrace.com/blog/CVE-2025-59287",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-502",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,8)"
}

CERTFR-2025-AVI-0879

Vulnerability from certfr_avis - Published: 2025-10-15 - Updated: 2025-10-15

De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Microsoft indique que les vulnérabilités CVE-2025-24990, CVE-2025-47827 et CVE-2025-59230 sont activement exploitées.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Microsoft	Windows	Windows 10 pour systèmes x64 versions antérieures à 10.0.10240.21161
Microsoft	Windows	Windows 10 Version 1607 pour systèmes x64 versions antérieures à 10.0.14393.8519
Microsoft	Windows	Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.25722
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2 (Server Core installation) versions antérieures à 1.000
Microsoft	Windows	Windows Server 2012 R2 versions antérieures à 6.3.9600.22824
Microsoft	Windows	Windows Server 2022 versions antérieures à 10.0.20348.4294
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes x64 versions antérieures à 10.0.19044.6456
Microsoft	Windows	Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.4294
Microsoft	Windows	Windows App Client pour Windows Desktop versions antérieures à 2.0.706.0
Microsoft	Windows	Remote Desktop client pour Windows Desktop versions antérieures à 1.2.6599.0
Microsoft	Windows	Windows Server 2016 versions antérieures à 10.0.14393.8519
Microsoft	Windows	Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.7919
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.19045.6456
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2 versions antérieures à 6.0.6003.23571
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 versions antérieures à 6.1.7601.27974
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes ARM64 versions antérieures à 10.0.19044.6456
Microsoft	Windows	Windows 11 Version 24H2 pour systèmes x64 versions antérieures à 10.0.26100.6899
Microsoft	Windows	Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1913
Microsoft	Windows	Windows Server 2008 pour systèmes 32 bits Service Pack 2 versions antérieures à 6.0.6003.23571
Microsoft	Windows	Windows Server 2025 versions antérieures à 10.0.26100.6899
Microsoft	Windows	Windows 10 Version 21H2 pour systèmes 32 bits versions antérieures à 10.0.19044.6456
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes 32 bits versions antérieures à 10.0.19045.6456
Microsoft	Windows	Windows 11 Version 25H2 pour systèmes ARM64 versions antérieures à 10.0.26200.6899
Microsoft	Windows	Windows 10 Version 22H2 pour systèmes x64 versions antérieures à 10.0.19045.6456
Microsoft	Windows	Windows 11 Version 22H2 pour systèmes ARM64 versions antérieures à 10.0.22621.6060
Microsoft	Windows	Windows Server 2008 pour systèmes x64 Service Pack 2 (Server Core installation) versions antérieures à 6.0.6003.23571
Microsoft	Windows	Windows 10 Version 1809 pour systèmes 32 bits versions antérieures à 10.0.17763.7919
Microsoft	Windows	Windows 11 Version 23H2 pour systèmes x64 versions antérieures à 10.0.22631.6060
Microsoft	Windows	Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22824
Microsoft	Windows	Windows Server 2025 (Server Core installation) versions antérieures à 10.0.26100.6899
Microsoft	Windows	Windows 11 Version 23H2 pour systèmes ARM64 versions antérieures à 10.0.22631.6060
Microsoft	Windows	Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.8519
Microsoft	Windows	Windows 11 Version 24H2 pour systèmes ARM64 versions antérieures à 10.0.26100.6899
Microsoft	Windows	Windows Server 2008 R2 pour systèmes x64 Service Pack 1 (Server Core installation) versions antérieures à 6.1.7601.27974
Microsoft	Windows	Windows Server 2019 versions antérieures à 10.0.17763.7919
Microsoft	Windows	Windows 10 Version 1607 pour systèmes 32 bits versions antérieures à 10.0.14393.8519
Microsoft	Windows	Windows Server 2012 versions antérieures à 6.2.9200.25722
Microsoft	Windows	Windows 10 Version 1809 pour systèmes x64 versions antérieures à 10.0.17763.7919
Microsoft	Windows	Windows 10 pour systèmes 32 bits versions antérieures à 10.0.10240.21161

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft Windows CVE-2025-59205	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55682	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58727	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59204	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59275	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-50175	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55697	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58737	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55326	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-53139	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59502	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55328	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59261	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59214	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58718	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58738	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55687	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59255	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-48004	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59284	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58720	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55688	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55700	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59259	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59196	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55336	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55696	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55685	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55694	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-47827	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59254	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55340	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58722	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55690	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55692	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59184	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59192	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55683	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58731	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-54957	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58714	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55689	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55693	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59194	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59289	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59211	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59197	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58736	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58716	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55333	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59190	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59198	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58729	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-53150	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59202	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58730	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58733	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59200	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55701	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58734	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55698	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-25004	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59209	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59290	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59191	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55332	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55678	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59278	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59242	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55331	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58715	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59230	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-47979	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59188	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59201	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55677	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59244	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58719	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58739	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-24052	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58735	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55691	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55676	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55337	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59241	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55335	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59206	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59295	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55681	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55330	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59280	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59258	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59282	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59186	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55699	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-24990	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59203	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59260	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55248	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58726	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55684	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59277	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-48813	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59193	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59189	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55339	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58728	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59207	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55338	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59210	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58717	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2016-9535	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58725	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-2884	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-53768	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59287	2025-10-24	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59257	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55686	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59185	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55680	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59294	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-49708	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55334	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59187	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-50174	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-53717	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59253	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-58732	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55679	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59195	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-50152	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59199	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55695	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-55325	2025-10-14	vendor-advisory
Bulletin de sécurité Microsoft Windows CVE-2025-59208	2025-10-14	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows 10 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.10240.21161",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.14393.8519",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 (Server Core installation) versions ant\u00e9rieures \u00e0 6.2.9200.25722",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 1.000",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 versions ant\u00e9rieures \u00e0 6.3.9600.22824",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 versions ant\u00e9rieures \u00e0 10.0.20348.4294",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19044.6456",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.20348.4294",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows App Client pour Windows Desktop versions ant\u00e9rieures \u00e0 2.0.706.0",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Remote Desktop client pour Windows Desktop versions ant\u00e9rieures \u00e0 1.2.6599.0",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 versions ant\u00e9rieures \u00e0 10.0.14393.8519",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.17763.7919",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19045.6456",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.23571",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 versions ant\u00e9rieures \u00e0 6.1.7601.27974",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.19044.6456",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 24H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.26100.6899",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2022, 23H2 Edition (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.25398.1913",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 versions ant\u00e9rieures \u00e0 6.0.6003.23571",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2025 versions ant\u00e9rieures \u00e0 10.0.26100.6899",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 21H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19044.6456",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.19045.6456",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 25H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26200.6899",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 22H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.19045.6456",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 22H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22621.6060",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 pour syst\u00e8mes x64 Service Pack 2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.0.6003.23571",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.17763.7919",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 23H2 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.22631.6060",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 R2 (Server Core installation) versions ant\u00e9rieures \u00e0 6.3.9600.22824",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2025 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.26100.6899",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 23H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.22631.6060",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2016 (Server Core installation) versions ant\u00e9rieures \u00e0 10.0.14393.8519",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 11 Version 24H2 pour syst\u00e8mes ARM64 versions ant\u00e9rieures \u00e0 10.0.26100.6899",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1 (Server Core installation) versions ant\u00e9rieures \u00e0 6.1.7601.27974",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2019 versions ant\u00e9rieures \u00e0 10.0.17763.7919",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1607 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.14393.8519",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2012 versions ant\u00e9rieures \u00e0 6.2.9200.25722",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 Version 1809 pour syst\u00e8mes x64 versions ant\u00e9rieures \u00e0 10.0.17763.7919",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 10 pour syst\u00e8mes 32 bits versions ant\u00e9rieures \u00e0 10.0.10240.21161",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-55691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55691"
    },
    {
      "name": "CVE-2025-58738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58738"
    },
    {
      "name": "CVE-2025-58729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58729"
    },
    {
      "name": "CVE-2025-55684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55684"
    },
    {
      "name": "CVE-2025-59197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59197"
    },
    {
      "name": "CVE-2025-55679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55679"
    },
    {
      "name": "CVE-2025-55248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55248"
    },
    {
      "name": "CVE-2025-58719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58719"
    },
    {
      "name": "CVE-2025-59190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59190"
    },
    {
      "name": "CVE-2025-58736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58736"
    },
    {
      "name": "CVE-2025-59254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59254"
    },
    {
      "name": "CVE-2025-59206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59206"
    },
    {
      "name": "CVE-2025-59295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59295"
    },
    {
      "name": "CVE-2025-59287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59287"
    },
    {
      "name": "CVE-2025-55678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55678"
    },
    {
      "name": "CVE-2025-59208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59208"
    },
    {
      "name": "CVE-2025-58731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58731"
    },
    {
      "name": "CVE-2025-55339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55339"
    },
    {
      "name": "CVE-2025-59191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59191"
    },
    {
      "name": "CVE-2025-55676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55676"
    },
    {
      "name": "CVE-2025-58730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58730"
    },
    {
      "name": "CVE-2025-59187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59187"
    },
    {
      "name": "CVE-2025-55685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55685"
    },
    {
      "name": "CVE-2025-59257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59257"
    },
    {
      "name": "CVE-2025-58735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58735"
    },
    {
      "name": "CVE-2025-58717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58717"
    },
    {
      "name": "CVE-2025-59199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59199"
    },
    {
      "name": "CVE-2025-59278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59278"
    },
    {
      "name": "CVE-2025-59198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59198"
    },
    {
      "name": "CVE-2025-58725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58725"
    },
    {
      "name": "CVE-2025-55332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55332"
    },
    {
      "name": "CVE-2025-59230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59230"
    },
    {
      "name": "CVE-2025-55690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55690"
    },
    {
      "name": "CVE-2025-58732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58732"
    },
    {
      "name": "CVE-2025-59194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59194"
    },
    {
      "name": "CVE-2025-59258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59258"
    },
    {
      "name": "CVE-2025-55687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55687"
    },
    {
      "name": "CVE-2025-55335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55335"
    },
    {
      "name": "CVE-2025-53139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53139"
    },
    {
      "name": "CVE-2025-59192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59192"
    },
    {
      "name": "CVE-2025-59255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59255"
    },
    {
      "name": "CVE-2025-58726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58726"
    },
    {
      "name": "CVE-2025-47979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47979"
    },
    {
      "name": "CVE-2025-59186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59186"
    },
    {
      "name": "CVE-2025-58716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58716"
    },
    {
      "name": "CVE-2025-58733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58733"
    },
    {
      "name": "CVE-2025-59201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59201"
    },
    {
      "name": "CVE-2025-58720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58720"
    },
    {
      "name": "CVE-2025-59207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59207"
    },
    {
      "name": "CVE-2025-55333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55333"
    },
    {
      "name": "CVE-2025-59200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59200"
    },
    {
      "name": "CVE-2025-59282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59282"
    },
    {
      "name": "CVE-2025-55682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55682"
    },
    {
      "name": "CVE-2025-55694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55694"
    },
    {
      "name": "CVE-2025-58737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58737"
    },
    {
      "name": "CVE-2025-55331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55331"
    },
    {
      "name": "CVE-2025-59261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59261"
    },
    {
      "name": "CVE-2025-55325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55325"
    },
    {
      "name": "CVE-2025-59259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59259"
    },
    {
      "name": "CVE-2025-55334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55334"
    },
    {
      "name": "CVE-2025-59205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59205"
    },
    {
      "name": "CVE-2025-48813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48813"
    },
    {
      "name": "CVE-2025-48004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48004"
    },
    {
      "name": "CVE-2025-59260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59260"
    },
    {
      "name": "CVE-2025-55688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55688"
    },
    {
      "name": "CVE-2025-55701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55701"
    },
    {
      "name": "CVE-2025-59189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59189"
    },
    {
      "name": "CVE-2025-55330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55330"
    },
    {
      "name": "CVE-2025-55698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55698"
    },
    {
      "name": "CVE-2025-49708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49708"
    },
    {
      "name": "CVE-2025-59195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59195"
    },
    {
      "name": "CVE-2025-50152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50152"
    },
    {
      "name": "CVE-2025-59294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59294"
    },
    {
      "name": "CVE-2025-59214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59214"
    },
    {
      "name": "CVE-2025-55693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55693"
    },
    {
      "name": "CVE-2025-59204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59204"
    },
    {
      "name": "CVE-2025-55336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55336"
    },
    {
      "name": "CVE-2025-24052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24052"
    },
    {
      "name": "CVE-2025-55338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55338"
    },
    {
      "name": "CVE-2025-55692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55692"
    },
    {
      "name": "CVE-2025-55326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55326"
    },
    {
      "name": "CVE-2025-59244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59244"
    },
    {
      "name": "CVE-2025-55696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55696"
    },
    {
      "name": "CVE-2025-59184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59184"
    },
    {
      "name": "CVE-2025-59209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59209"
    },
    {
      "name": "CVE-2025-55686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55686"
    },
    {
      "name": "CVE-2025-47827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47827"
    },
    {
      "name": "CVE-2025-59277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59277"
    },
    {
      "name": "CVE-2025-59253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59253"
    },
    {
      "name": "CVE-2025-50174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50174"
    },
    {
      "name": "CVE-2025-59241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59241"
    },
    {
      "name": "CVE-2025-58728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58728"
    },
    {
      "name": "CVE-2025-53150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53150"
    },
    {
      "name": "CVE-2025-59242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59242"
    },
    {
      "name": "CVE-2025-55677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55677"
    },
    {
      "name": "CVE-2025-59185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59185"
    },
    {
      "name": "CVE-2025-55681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55681"
    },
    {
      "name": "CVE-2025-58718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58718"
    },
    {
      "name": "CVE-2025-55700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55700"
    },
    {
      "name": "CVE-2025-59502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59502"
    },
    {
      "name": "CVE-2025-59275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59275"
    },
    {
      "name": "CVE-2025-59284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59284"
    },
    {
      "name": "CVE-2025-55340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55340"
    },
    {
      "name": "CVE-2025-58734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58734"
    },
    {
      "name": "CVE-2025-55697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55697"
    },
    {
      "name": "CVE-2025-59203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59203"
    },
    {
      "name": "CVE-2025-58715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58715"
    },
    {
      "name": "CVE-2025-55695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55695"
    },
    {
      "name": "CVE-2025-59289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59289"
    },
    {
      "name": "CVE-2025-58714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58714"
    },
    {
      "name": "CVE-2025-25004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-25004"
    },
    {
      "name": "CVE-2025-53768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53768"
    },
    {
      "name": "CVE-2025-55699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55699"
    },
    {
      "name": "CVE-2025-50175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-50175"
    },
    {
      "name": "CVE-2025-59211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59211"
    },
    {
      "name": "CVE-2025-58739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58739"
    },
    {
      "name": "CVE-2025-59202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59202"
    },
    {
      "name": "CVE-2025-59193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59193"
    },
    {
      "name": "CVE-2025-55683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55683"
    },
    {
      "name": "CVE-2025-59280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59280"
    },
    {
      "name": "CVE-2025-24990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24990"
    },
    {
      "name": "CVE-2025-59210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59210"
    },
    {
      "name": "CVE-2025-58722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58722"
    },
    {
      "name": "CVE-2025-59188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59188"
    },
    {
      "name": "CVE-2025-55689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55689"
    },
    {
      "name": "CVE-2025-58727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58727"
    },
    {
      "name": "CVE-2025-55328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55328"
    },
    {
      "name": "CVE-2025-59290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59290"
    },
    {
      "name": "CVE-2025-55680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55680"
    },
    {
      "name": "CVE-2025-2884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2884"
    },
    {
      "name": "CVE-2025-53717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53717"
    },
    {
      "name": "CVE-2025-59196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59196"
    },
    {
      "name": "CVE-2025-55337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-55337"
    },
    {
      "name": "CVE-2016-9535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-9535"
    },
    {
      "name": "CVE-2025-54957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54957"
    }
  ],
  "initial_release_date": "2025-10-15T00:00:00",
  "last_revision_date": "2025-10-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0879",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-10-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Windows. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nMicrosoft indique que les vuln\u00e9rabilit\u00e9s CVE-2025-24990, CVE-2025-47827 et CVE-2025-59230 sont activement exploit\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59205",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59205"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55682",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55682"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58727",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58727"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59204",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59204"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59275",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59275"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50175",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50175"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55697",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55697"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58737",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58737"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55326",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55326"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53139",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53139"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59502",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59502"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55328",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55328"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59261",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59261"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59214",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59214"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58718",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58718"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58738",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58738"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55687",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55687"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59255",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59255"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-48004",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48004"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59284",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59284"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58720",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58720"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55688",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55688"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55700",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55700"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59259",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59259"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59196",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59196"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55336",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55336"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55696",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55696"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55685",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55685"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55694",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55694"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-47827",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47827"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59254",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59254"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55340",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55340"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58722",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58722"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55690",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55690"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55692",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55692"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59184",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59184"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59192",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59192"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55683",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55683"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58731",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58731"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-54957",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54957"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58714",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58714"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55689",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55689"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55693",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55693"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59194",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59194"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59289",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59289"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59211",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59211"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59197",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59197"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58736",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58736"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58716",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58716"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55333",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55333"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59190",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59190"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59198",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59198"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58729",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58729"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53150",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53150"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59202",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59202"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58730",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58730"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58733",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58733"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59200",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59200"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55701",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55701"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58734",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58734"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55698",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55698"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-25004",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25004"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59209",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59209"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59290",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59290"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59191",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59191"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55332",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55332"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55678",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55678"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59278",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59278"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59242",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59242"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55331",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55331"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58715",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58715"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59230",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59230"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-47979",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47979"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59188",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59188"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59201",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59201"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55677",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55677"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59244",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59244"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58719",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58719"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58739",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58739"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-24052",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24052"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58735",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58735"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55691",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55691"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55676",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55676"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55337",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55337"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59241",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59241"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55335",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55335"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59206",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59206"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59295",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59295"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55681",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55681"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55330",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55330"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59280",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59280"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59258",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59258"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59282",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59282"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59186",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59186"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55699",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55699"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-24990",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24990"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59203",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59203"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59260",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59260"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55248",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55248"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58726",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58726"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55684",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55684"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59277",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59277"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-48813",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48813"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59193",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59193"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59189",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59189"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55339",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55339"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58728",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58728"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59207",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59207"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55338",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55338"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59210",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59210"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58717",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58717"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2016-9535",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-9535"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58725",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58725"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-2884",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-2884"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53768",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53768"
    },
    {
      "published_at": "2025-10-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59287",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59257",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59257"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55686",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55686"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59185",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59185"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55680",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55680"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59294",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59294"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-49708",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49708"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55334",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55334"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59187",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59187"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50174",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50174"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-53717",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53717"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59253",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59253"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-58732",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58732"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55679",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55679"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59195",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59195"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-50152",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50152"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59199",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59199"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55695",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55695"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-55325",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55325"
    },
    {
      "published_at": "2025-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Windows CVE-2025-59208",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59208"
    }
  ]
}

CERTFR-2025-AVI-0930

Vulnerability from certfr_avis - Published: 2025-10-27 - Updated: 2025-10-27

Une vulnérabilité a été découverte dans Microsoft Windows Server Update Service. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

L'éditeur a publié un nouveau correctif de sécurité pour cette vulnérabilité qui remplace le correctif précédemment listé dans l'avis CERTFR-2025-AVI-0879.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

La vulnérabilité concerne la fonctionnalité Windows Server Update Service (WSUS) activée sur Windows Server.

Impacted products

Vendor	Product	Description
Microsoft	Windows	Windows Server 2022, 23H2 Edition (Server Core installation) versions antérieures à 10.0.25398.1916
Microsoft	Windows	Windows Server 2022 versions antérieures à 10.0.20348.4297
Microsoft	Windows	Windows Server 2025 versions antérieures à 10.0.26100.6905
Microsoft	Windows	Windows Server 2016 versions antérieures à 10.0.14393.8524
Microsoft	Windows	Windows Server 2019 (Server Core installation) versions antérieures à 10.0.17763.7922
Microsoft	Windows	Windows Server 2012 R2 (Server Core installation) versions antérieures à 6.3.9600.22826
Microsoft	Windows	Windows Server 2012 (Server Core installation) versions antérieures à 6.2.9200.25728
Microsoft	Windows	Windows Server 2016 (Server Core installation) versions antérieures à 10.0.14393.8524
Microsoft	Windows	Windows Server 2012 R2 versions antérieures à 6.3.9600.22826
Microsoft	Windows	Windows Server 2022 (Server Core installation) versions antérieures à 10.0.20348.4297
Microsoft	Windows	Windows Server 2025 (Server Core installation) versions antérieures à 10.0.26100.6905
Microsoft	Windows	Windows Server 2019 versions antérieures à 10.0.17763.7922
Microsoft	Windows	Windows Server 2012 versions antérieures à 6.2.9200.25728

References

Title

Publication Time

CNVD-2025-26108

Vulnerability from cnvd - Published: 2025-10-31

Title

Microsoft Windows Server远程代码执行漏洞（CNVD-2025-26108）

Description

Microsoft Windows Server是美国微软（Microsoft）公司的一套服务器操作系统。 Microsoft Windows Server存在远程代码执行漏洞，攻击者可利用该漏洞通过向WSUS服务发送特制的请求在目标系统上执行任意代码。

Severity

高

Patch Name

Microsoft Windows Server远程代码执行漏洞（CNVD-2025-26108）的补丁

Patch Description

Microsoft Windows Server是美国微软（Microsoft）公司的一套服务器操作系统。 Microsoft Windows Server存在远程代码执行漏洞，攻击者可利用该漏洞通过向WSUS服务发送特制的请求在目标系统上执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287

Reference

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287

Impacted products

Name
['Microsoft Windows Server 2016', 'Microsoft Windows Server 2019', 'Microsoft Windows Server 2012', 'Microsoft Windows Server 2022', 'Microsoft Windows Server 2012 R2', 'Microsoft Windows Server 2022 23H2', 'Microsoft Windows Server 2025']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2025-59287",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2025-59287"
    }
  },
  "description": "Microsoft Windows Server\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4e00\u5957\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u3002\n\nMicrosoft Windows Server\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u5411WSUS\u670d\u52a1\u53d1\u9001\u7279\u5236\u7684\u8bf7\u6c42\u5728\u76ee\u6807\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-26108",
  "openTime": "2025-10-31",
  "patchDescription": "Microsoft Windows Server\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4e00\u5957\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nMicrosoft Windows Server\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u5411WSUS\u670d\u52a1\u53d1\u9001\u7279\u5236\u7684\u8bf7\u6c42\u5728\u76ee\u6807\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Windows Server\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2025-26108\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Windows Server 2016",
      "Microsoft Windows Server 2019",
      "Microsoft Windows Server 2012",
      "Microsoft Windows Server 2022",
      "Microsoft Windows Server 2012 R2",
      "Microsoft Windows Server 2022 23H2",
      "Microsoft Windows Server 2025"
    ]
  },
  "referenceLink": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287",
  "serverity": "\u9ad8",
  "submitTime": "2025-10-17",
  "title": "Microsoft Windows Server\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2025-26108\uff09"
}

EUVD-2026-271696

European Vulnerability Database identifier assigned by ENISA

Reserved

2026-10-02 07:03

Assigner

ENISA

Alias of

a CVE record, shown under related vulnerabilities. This identifier carries no description, severity or references of its own: they belong to that CVE.

JSON

To clipboard

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T07:03:14.736380+00:00",
  "id": "EUVD-2026-271696"
}

FKIE_CVE-2025-59287

Vulnerability from fkie_nvd - Published: 2025-10-14 17:16 - Updated: 2026-06-17 09:45

CISA Previdian

Severity

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

References

URL	Tags
secure@microsoft.com	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://hawktrace.com/blog/CVE-2025-59287	Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-windows-server-wsus-flaw-exploited-in-attacks/	Press/Media Coverage
af854a3a-2127-422b-91ae-364da2661108	https://www.vicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.vicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-service	Mitigation, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951	Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287	Third Party Advisory, US Government Resource

Impacted products

Vendor	Product	Version
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	*
microsoft	windows_server_2019	*
microsoft	windows_server_2022	*
microsoft	windows_server_2022_23h2	*
microsoft	windows_server_2025	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25728",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.25728",
              "status": "affected",
              "version": "6.2.9200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22826",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.22826",
              "status": "affected",
              "version": "6.3.9600.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8524",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.8524",
              "status": "affected",
              "version": "10.0.14393.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7922",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.7922",
              "status": "affected",
              "version": "10.0.17763.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.20348.4297",
              "status": "affected",
              "version": "10.0.20348.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.25398.1916",
              "status": "affected",
              "version": "10.0.25398.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.6905",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2025 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.6905",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "secure@microsoft.com"
    }
  ],
  "cisaActionDue": "2025-11-14",
  "cisaExploitAdd": "2025-10-24",
  "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7200EF9B-2689-4E9E-BE9E-E00836A7D284",
              "versionEndExcluding": "10.0.14393.8524",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9DDF9BE-8D0B-4027-B3F7-FFD96438E3EB",
              "versionEndExcluding": "10.0.17763.7922",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BDAC36D7-54A0-456B-B176-17A0B9E63C7A",
              "versionEndExcluding": "10.0.20348.4297",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA85BFD-9802-452E-97B1-6380554EF254",
              "versionEndExcluding": "10.0.25398.1916",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E5FFF5B-8745-47F6-A0B7-262AA43353BB",
              "versionEndExcluding": "10.0.26100.6905",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network."
    }
  ],
  "id": "CVE-2025-59287",
  "lastModified": "2026-06-17T09:45:52.480",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-59287",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-10-25T03:56:03.912708Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-10-14T17:16:11.670",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://hawktrace.com/blog/CVE-2025-59287"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Press/Media Coverage"
      ],
      "url": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-windows-server-wsus-flaw-exploited-in-attacks/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mitigation",
        "Third Party Advisory"
      ],
      "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-service"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Secondary"
    }
  ]
}

GHSA-943J-4893-6RFQ

Vulnerability from github – Published: 2025-10-14 18:30 – Updated: 2025-11-11 15:31

Details

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Severity

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-59287"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-10-14T17:16:11Z",
    "severity": "CRITICAL"
  },
  "details": "Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.",
  "id": "GHSA-943j-4893-6rfq",
  "modified": "2025-11-11T15:31:20Z",
  "published": "2025-10-14T18:30:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59287"
    },
    {
      "type": "WEB",
      "url": "https://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951"
    },
    {
      "type": "WEB",
      "url": "https://hawktrace.com/blog/CVE-2025-59287"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287"
    },
    {
      "type": "WEB",
      "url": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-windows-server-wsus-flaw-exploited-in-attacks"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287"
    },
    {
      "type": "WEB",
      "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service"
    },
    {
      "type": "WEB",
      "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-service"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

ICSA-25-352-02

Vulnerability from csaf_cisa - Published: 2025-12-09 08:00 - Updated: 2025-12-18 18:23

Summary

Schneider Electric EcoStruxure Foxboro DCS Advisor

Scope

1 vulnerability in this advisory, including CVE-2025-59287.

CVE-2025-59287

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products Known affected: 2 products

Open the full advisory

MSRC_CVE-2025-59287

Vulnerability from csaf_microsoft - Published: 2025-10-14 07:00 - Updated: 2025-10-24 07:00

Summary

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Severity

Critical

Scope

1 vulnerability in this advisory, including CVE-2025-59287.

CVE-2025-59287

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Fixed: 13 products Known affected: 13 products

https://support.microsoft.com/help/5070883 https://support.microsoft.com/help/5070884 https://support.microsoft.com/help/5070892

Open the full advisory

SEVD-2025-343-02

Vulnerability from csaf_se - Published: 2025-12-09 08:00 - Updated: 2025-12-09 08:00

Summary

EcoStruxure™ Foxboro DCS Advisor

Scope

1 vulnerability in this advisory, including CVE-2025-59287.

CVE-2025-59287

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products Known affected: 2 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-59287 (GCVE-0-2025-59287)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: previdian

Details

References

BDU:2025-12999 (CVE-2025-59287)

Solutions

Solutions

Tags

Sightings

Nomenclature

Related by attack behaviour