OS-WINDOWS Microsoft Windows Server Update Services potential insecure object deserialization attempt

IPS-NPA

1 SID: 65470

Description

Detects an attempt to exploit CVE-2023-35317 and CVE-2025-59287, an unsafe deserialization flaw that can allow code execution in Microsoft Windows Server Update Services potential insecure object.

CVEs

CVE-2023-35317 CVE-2025-59287

Related malware families

Microsoft

References

msrc.microsoft.com
msrc.microsoft.com