CVE-2025-59502CWE-400

Remote Procedure Call Denial of Service Vulnerability

High · published October 14, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
64.4
In the wild
Unconfirmed
What it is

⚡ An unauthorized attacker can trigger a denial of service through Windows Remote Procedure Call, making your network feel like it’s stuck in traffic! 🚦 Imagine a busy intersection where someone sets up a roadblock, preventing all cars from moving forward. That’s what happens here; an attacker can consume all available resources, leaving legitimate requests stranded and unable to get through. If exploited, this vulnerability could bring your network services to a screeching halt, disrupting critical operations and leaving legitimate users frustrated and unable to access essential resources. This could lead to major downtime and impact business continuity, potentially causing considerable losses.

Put simply

Imagine a busy intersection where someone sets up a roadblock, preventing all cars from moving forward. That’s what happens here; an attacker can consume all available resources, leaving legitimate requests stranded and unable to get through. CVE-2025-59502 is a vulnerability in the Windows Remote Procedure Call (RPC) system that allows unauthorized attackers to exploit uncontrolled resource consumption, leading to a denial of service condition on affected systems.

What to do

If exploited, this vulnerability could bring your network services to a screeching halt, disrupting critical operations and leaving legitimate users frustrated and unable to access essential resources. This could lead to major downtime and impact business continuity, potentially causing considerable losses. To mitigate this risk, ensure your Windows systems are updated to the latest patches that address this vulnerability. Additionally, consider implementing network monitoring to identify unusual activity that could indicate an exploit attempt. Regularly review your security policies to enhance your network defenses. You've got this! By taking these steps, you're reinforcing your network defenses and stepping into your security hero status! 🦸

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01063 · 64.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-10-14T17:00Z
EPSS history
Timeline
  • 14 OCT 17:00Z
    Remote Procedure Call Denial of Service Vulnerability
    cvelistv5