An out-of-band (OOB) security update that patches an actively exploited Windows Server Update Service (WSUS) vulnerability ...
Microsoft halts KB5070881 after reports it broke Hotpatch on Windows Server 2025 while patching an actively exploited WSUS ...
Only servers with the WSUS role enabled are vulnerable. The update applies to Windows Server 2025 (KB5070881), version 23H2 (KB5070879), 2022 (KB5070884), 2019 (KB5070883), 2016 ( ...
An "authorized attacker" could exploit this weakness to gain elevated privileges, potentially reaching SYSTEM-level access.
Tracked as CVE-2025-33073, the vulnerability affects the Windows Server Message Block client, a core component used for file and printer sharing and network resource access across enterprise ...