Microsoft · Security update · October 23, 2025

KB5070887: October 2025 security update

KB5070887, released October 23, 2025, fixes 1 CVE across 2 products. One of them is being exploited (CVE-2025-59287); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

1 rated Critical

Exploited

CVE-2025-59287

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.9998

99th percentile

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2025-59287	Windows Server Update Service	Remote Code Execution	9.8	0.9998	KEVExploited

Released the same day

KB5070879
Windows Server 2022, 23H2 Edition (Server Core installation)
KB5070881
Windows Server 2025, Windows Server 2025 (Server Core installation)
KB5070882
Windows Server 2016, Windows Server 2016 (Server Core installation)
KB5070883
Windows Server 2019, Windows Server 2019 (Server Core installation)
KB5070884
Windows Server 2022, Windows Server 2022 (Server Core installation)
KB5070886
Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
KB5070892
Windows Server 2022, Windows Server 2022 (Server Core installation)
KB5070893
Windows Server 2025, Windows Server 2025 (Server Core installation)

Vendor advisory

https://support.microsoft.com/help/5070887

For tools and AI agents

This page as data: JSON · Markdown

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.