漏洞描述
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-service↗hawktrace.comhttps://hawktrace.com/blog/CVE-2025-59287↗www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service↗gist.github.comhttps://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951↗msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287↗