
- Microsoft issues emergency patch for a critical WSUS flaw enabling remote code execution
- CVE-2025-59287 allows unauthenticated attackers to gain SYSTEM privileges without user interaction
- An out-of-band update was released after public exploit code surfaced online
Microsoft has issued an emergency Windows server security patch to fix a critical severity flaw apparently abused in the wild.