Main
Vulnerability Database
Exploits
ID:12097 - Exploit for Deserialization of Untrusted Data in Windows Server - CVE-2025-59287
ID:12097 - Exploit for Deserialization of Untrusted Data in Windows Server - CVE-2025-59287
Published: November 7, 2025
Vulnerability identifier: #VU117222
Vulnerability risk: Critical
CVE-ID: CVE-2025-59287
CWE-ID: CWE-502
Exploitation vector: Remote access
Vulnerable software:
Windows Server
Windows Server
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insecure input validation when processing serialized data. A remote attacker send a crafted event that triggers unsafe object deserialization in a legacy serialization mechanism and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install updates from vendor's website.