Medium MSRC-CVE-2025-59502 1 CVE

Remote Procedure Call Denial of Service Vulnerability

Published Oct 14, 2025 · Updated Oct 14, 2025

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Moderate. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

Security updates
10.0.17763.7792 — https://support.microsoft.com/help/5065428
10.0.20348.4171 — https://support.microsoft.com/help/5065432
10.0.20348.4106 — https://support.microsoft.com/help/5065306
10.0.19044.6332 — https://support.microsoft.com/help/5065429
10.0.22631.5909 — https://support.microsoft.com/help/5065431
10.0.26100.6584 — https://support.microsoft.com/help/5065426
10.0.26100.6508 — https://support.microsoft.com/help/5065474
10.0.25398.1849 — https://support.microsoft.com/help/5065425

Vulnerabilities 1

High 7.5

CVE-2025-59502

Remote Procedure Call Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 14, 2025

Revision history

2025-10-14 #1
Information published. This CVE was addressed by updates that were released in September 2025, but the CVE was inadvertently omitted from the September 2025 Security Updates. This is an informational change only. Customers who have already installed the September 2025 updates do not need to take any further action.

References

CVE-2025-59502 Remote Procedure Call Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59502
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss