超危

Microsoft Windows Server Update Service (WSUS)反序列化漏洞

2025-10-14 17:01:47 公开，2026-03-05 00:55:06 更新

勒索软件漏洞
CISA KEV
关键漏洞
CWE Top 25 (2023)
CWE Top 25 (2024)
远程
无需认证
公开PoC

CWEs：: CWE-502 （Deserialization of Untrusted Data）
CAPEC：: CAPEC-586 （Object Injection）
SSVC：: 可利用状态：已被积极利用攻击自动化：是技术影响评估：全部 2025-10-25 11:56:03

风险信息

CVSS v3.1 向量: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v3.1 风险值: 9.8

详细信息

漏洞类型: 代码问题
漏洞描述: Microsoft Windows可能允许远程攻击者在系统上执行任意代码，这是由Windows Server Update Service (WSUS)组件中的不安全反序列化漏洞引起的。
修复建议: 使用Microsoft自动更新为您的系统应用适当的补丁，或使用Microsoft安全更新指南查找可用的补丁。参考链接： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287

参考链接

https://gist.github.com/hawktrace/880b54fb9c07ddb028baaae401bd3951
NVD · Third Party Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287
CVE · vendor-advisory
https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-windows-server-wsus-flaw-exploited-in-attacks/
NVD · Press/Media Coverage
https://hawktrace.com/blog/CVE-2025-59287
NVD · Exploit · Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59287
NVD · US Government Resource · Third Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-59287-detection-script-rce-vulnerability-in-windows-server-update-service
NVD · Third Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-59287-mitigation-script-rce-vulnerability-in-windows-server-update-service
NVD · Mitigation · Third Party Advisory