Skip to content

Exploited: 178

LatestCVE-2026-115731 — Report Deserialization Code Execution

7.5

CVE-2026-105009Fix available

Windows Server Update Service Elevation of Privilege Vulnerability

Microsoft Windows Server 20122026-10-13 19:01 UTC1 min readRead in

Summary

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Remediation

Inventory every Microsoft Windows Server 2012 deployment, including staging.
Upgrade Microsoft Windows Server 2012 to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.

References

Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105009

Affected versions

Version	Fixed in
6.2.9200.0 – <6.2.9200.26434	6.2.9200.26434
6.3.9600.0 – <6.3.9600.23470	6.3.9600.23470
10.0.14393.0 – <10.0.14393.9612	10.0.14393.9612
10.0.17763.0 – <10.0.17763.9376	10.0.17763.9376
10.0.20348.0 – <10.0.20348.5761	10.0.20348.5761
10.0.26100.0 – <10.0.26100.33650	10.0.26100.33650

Weakness

CWE-276

Exploit probability (EPSS)

0.3%

Timeline

2026-10-13Publicly disclosed

Sources

CVE