美国网络安全与基础设施安全局（CISA）向全球组织发出警告，微软Windows Server Update Services（WSUS）中存在一个正被积极利用的关键远程代码执行（RCE）漏洞。

该漏洞利用了 GetCookie 端点中的遗留序列化机制，其中加密的 AuthorizationCookie 对象使用 AES-128-CBC 解密，并通过 BinaryFormatter 反序列化，无需类型验证，从而为整个系统接管打开了大门。

微软近日承认，针对 Windows Server 2025 的紧急安全更新 KB5070881 出现问题，导致部分已启用 热补丁 功能的设备出现故障。这一事件引发了业界对 Windows Server 2025 稳定性的关注，同时也凸显了在服务器安全更新过程中可能面临的挑战。

IT之家 11 月 4 日消息，科技媒体 Windows Report 昨日（11 月 3 日）发布博文，报道称微软近日紧急撤回了针对 Windows Server 2025 的紧急计划外（OOB）安全更新 KB5070881。IT之家曾于 10 月 ...

IT之家 10 月 24 日消息，据科技媒体 Bleeping Computer 今天报道，微软现已为 Windows Server 系统发布紧急安全更新，修复 Windows Server 更新服务（WSUS）的严重漏洞。 据介绍，本次漏洞编号为 CVE-2025-59287，属于远程执行安全漏洞（RCE），影响启用了 WSUS Server Role（服务器 ...

Microsoft halts KB5070881 after reports it broke Hotpatch on Windows Server 2025 while patching an actively exploited WSUS ...

Microsoft has issued an emergency Windows server security patch to fix a critical severity flaw apparently abused in the wild. As part of its most recent Patch Tuesday cumulative update (October 14, ...

Microsoft says that some WSUS servers upgraded to Windows Server 2022 might fail to push Windows 11, version 22H2 updates released during this month's Patch Tuesday to endpoints across enterprise ...

Microsoft says that KB5017383, this month's Windows preview update, has been accidentally listed in Windows Server Update Services (WSUS) and may lead to security update install problems in some ...

Microsoft Corp. yesterday confirmed it is investigating two-week-old reports from users unable to update client PCs using Windows Server Update Services (WSUS), but said that it is “premature” to ...

Microsoft Corp. yesterday acknowledged that it may have to re-release a recent fix for a flaw that stymied some users’ ability to grab security patches through Windows Server Update Services (WSUS).

The Windows operating system releases updates from time to time. These updates help protect your system from the latest security issues. But sometimes, Windows Update ...