Windows Server Update Service vulnerabilities
7 known CVE vulnerabilities in Windows Server Update Service, translated and rated.
- CVE-2025-59287CriticalActively exploited
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-83499High
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-81969High
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-105009High
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-50444High
Missing authentication for a critical function in Windows Server Update Service (WSUS) allows an authorized attacker to elevate privileges over a network.
- CVE-2026-50328High
An unhandled exception in Windows Server Update Service (WSUS) allows an unauthorized attacker to perform tampering over a network. This vulnerability could compromise the integrity of updates.
- CVE-2026-20856High
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS