GCVE-110-NCSC-2025-310

Weaknesses (CWE)

CWE-532Insertion of Sensitive Information into Log FileCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-122Heap-based Buffer OverflowCWE-416Use After FreeCWE-502Deserialization of Untrusted DataCWE-822Untrusted Pointer DereferenceCWE-121Stack-based Buffer OverflowCWE-126Buffer Over-readCWE-1023Incomplete Comparison with Missing FactorsCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-288Authentication Bypass Using an Alternate Path or ChannelCWE-125Out-of-bounds ReadCWE-287Improper AuthenticationCWE-209Generation of Error Message Containing Sensitive InformationCWE-1287Improper Validation of Specified Type of InputCWE-190Integer Overflow or WraparoundCWE-20Improper Input ValidationCWE-73External Control of File Name or PathCWE-284Improper Access ControlCWE-908Use of Uninitialized ResourceCWE-324Use of a Key Past its Expiration DateCWE-807Reliance on Untrusted Inputs in a Security DecisionCWE-319Cleartext Transmission of Sensitive InformationCWE-841Improper Enforcement of Behavioral WorkflowCWE-312Cleartext Storage of Sensitive InformationCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-476NULL Pointer DereferenceCWE-1240Use of a Cryptographic Primitive with a Risky ImplementationCWE-59Improper Link Resolution Before File Access ('Link Following')CWE-347Improper Verification of Cryptographic SignatureCWE-415Double Free

Risk Scores

CVSS 3.1

6.2/10

Medium · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Threat Intelligence

Snort Rules (1)

1059287 — Microsoft Windows Server Update Services (WSUS) Unauthenticated Remote Code Execution via Insecure Deserialization (CVE-2025-59287)

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

Aliases

CVE-2016-9535 CVE-2025-24052 CVE-2025-24990 CVE-2025-25004 CVE-2025-2884 CVE-2025-47827 CVE-2025-47979 CVE-2025-48004 CVE-2025-48813 CVE-2025-49708 CVE-2025-50152 CVE-2025-50174 CVE-2025-50175 CVE-2025-53139 CVE-2025-53150 CVE-2025-53717 CVE-2025-53768 CVE-2025-54957 CVE-2025-55325 CVE-2025-55326 CVE-2025-55328 CVE-2025-55330 CVE-2025-55331 CVE-2025-55332 CVE-2025-55333 CVE-2025-55334 CVE-2025-55335 CVE-2025-55336 CVE-2025-55337 CVE-2025-55338 CVE-2025-55339 CVE-2025-55340 CVE-2025-55676 CVE-2025-55677 CVE-2025-55678 CVE-2025-55679 CVE-2025-55680 CVE-2025-55681 CVE-2025-55682 CVE-2025-55683 CVE-2025-55684 CVE-2025-55685 CVE-2025-55686 CVE-2025-55687 CVE-2025-55688 CVE-2025-55689 CVE-2025-55690 CVE-2025-55691 CVE-2025-55692 CVE-2025-55693 CVE-2025-55694 CVE-2025-55695 CVE-2025-55696 CVE-2025-55697 CVE-2025-55698 CVE-2025-55699 CVE-2025-55700 CVE-2025-55701 CVE-2025-58714 CVE-2025-58715 CVE-2025-58716 CVE-2025-58717 CVE-2025-58718 CVE-2025-58719 CVE-2025-58720 CVE-2025-58722 CVE-2025-58725 CVE-2025-58726 CVE-2025-58727 CVE-2025-58728 CVE-2025-58729 CVE-2025-58730 CVE-2025-58731 CVE-2025-58732 CVE-2025-58733 CVE-2025-58734 CVE-2025-58735 CVE-2025-58736 CVE-2025-58737 CVE-2025-58738 CVE-2025-58739 CVE-2025-59184 CVE-2025-59185 CVE-2025-59186 CVE-2025-59187 CVE-2025-59188 CVE-2025-59189 CVE-2025-59190 CVE-2025-59191 CVE-2025-59192 CVE-2025-59193 CVE-2025-59194 CVE-2025-59195 CVE-2025-59196 CVE-2025-59197 CVE-2025-59198 CVE-2025-59199 CVE-2025-59200 CVE-2025-59201 CVE-2025-59202 CVE-2025-59203 CVE-2025-59204 CVE-2025-59205 CVE-2025-59206 CVE-2025-59207 CVE-2025-59208 CVE-2025-59209 CVE-2025-59210 CVE-2025-59211 CVE-2025-59214 CVE-2025-59230 CVE-2025-59241 CVE-2025-59242 CVE-2025-59244 CVE-2025-59253 CVE-2025-59254 CVE-2025-59255 CVE-2025-59257 CVE-2025-59258 CVE-2025-59259 CVE-2025-59260 CVE-2025-59261 CVE-2025-59275 CVE-2025-59277 CVE-2025-59278 CVE-2025-59280 CVE-2025-59282 CVE-2025-59284 CVE-2025-59287 CVE-2025-59289 CVE-2025-59290 CVE-2025-59294 CVE-2025-59295

References

advisory

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.