CVE-2025-59287: Microsoft fixes critical WSUS flaw under active attack

TL;DR


Summary:
- Microsoft has released a security update to address a critical vulnerability (CVE-2025-59287) in the Windows Server Update Services (WSUS) that is being actively exploited by attackers.
- The vulnerability could allow an attacker to execute arbitrary code on the WSUS server, potentially leading to a complete system compromise.
- Administrators are strongly advised to apply the security update as soon as possible to protect their systems from this critical threat.

Like summarized versions? Support us on Patreon!