Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products29

• Windows 10 Version 1607 for 32-bit Systems
• Windows 10 Version 1607 for x64-based Systems
• Windows 10 Version 1809 for 32-bit Systems
• Windows 10 Version 1809 for x64-based Systems
• Windows 10 Version 21H2 for 32-bit Systems
• Windows 10 Version 21H2 for ARM64-based Systems
• Windows 10 Version 21H2 for x64-based Systems
• Windows 10 Version 22H2 for 32-bit Systems
• Windows 10 Version 22H2 for ARM64-based Systems
• Windows 10 Version 22H2 for x64-based Systems
• Windows 11 Version 23H2 for ARM64-based Systems
• Windows 11 Version 23H2 for x64-based Systems
• Windows 11 Version 24H2 for ARM64-based Systems
• Windows 11 Version 24H2 for x64-based Systems
• Windows 11 Version 25H2 for ARM64-based Systems
• Windows 11 Version 25H2 for x64-based Systems
• Windows Server 2012
• Windows Server 2012 (Server Core installation)
• Windows Server 2012 R2
• Windows Server 2012 R2 (Server Core installation)
• Windows Server 2016
• Windows Server 2016 (Server Core installation)
• Windows Server 2019
• Windows Server 2019 (Server Core installation)
• Windows Server 2022
• Windows Server 2022 (Server Core installation)
• Windows Server 2022, 23H2 Edition (Server Core installation)
• Windows Server 2025
• Windows Server 2025 (Server Core installation)

✅ Remediation

KB5073723 (Security Update) — fixed build 10.0.17763.8276 KB5073457 (Security Update) — fixed build 10.0.20348.4648 KB5073724 (Security Update) — fixed build 10.0.19044.6809 KB5073724 (Security Update) — fixed build 10.0.19045.6809 KB5073379 (Security Update) — fixed build 10.0.26100.32230 KB5074109 (Security Update) — fixed build 10.0.26200.7623 KB5073455 (Security Update) — fixed build 10.0.22631.6491 KB5073450 (Security Update) — fixed build 10.0.25398.2092 KB5074109 (Security Update) — fixed build 10.0.26100.7623 KB5073722 (Security Update) — fixed build 10.0.14393.8783 KB5073698 (Monthly Rollup) — fixed build 6.2.9200.25868 KB5073696 (Monthly Rollup) — fixed build 6.3.9600.22968

🔗 References (22)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20856
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073723
• referencehttps://support.microsoft.com/help/5073723
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073457
• referencehttps://support.microsoft.com/help/5073457
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073724
• referencehttps://support.microsoft.com/help/5073724
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073379
• referencehttps://support.microsoft.com/en-us/topic/a6021fd2-b3b7-45a7-b68e-35c28a2a77da
• referencehttps://support.microsoft.com/help/5073379
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5074109
• referencehttps://support.microsoft.com/help/5074109
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073455
• referencehttps://support.microsoft.com/help/5073455
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073450
• referencehttps://support.microsoft.com/help/5073450
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073722
• referencehttps://support.microsoft.com/help/5073722
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073698
• referencehttps://support.microsoft.com/help/5073698
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5073696
• referencehttps://support.microsoft.com/help/5073696