HIGH 8.1 Microsoft

CVE-2026-42987

Windows Deployment Services (WDS) Remote Code Execution

Microsoft Security Update 2026-Jun: Windows Deployment Services (WDS) Remote Code Execution

Affected Products

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2025
Windows Server 2016
Windows Server 2016 (Server Core installation)

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42987
https://nvd.nist.gov/vuln/detail/CVE-2026-42987

Published: 2026-06-09 · Source: Microsoft · Feed updated: 2026-08-04

This high severity vulnerability with a CVSS score of 8.1 was published on 2026-06-09 via Microsoft. Affected: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022 and 5 more.

vulnfeed aggregates 9214 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.