Microsoft’s Update Health Tools Configuration Vulnerability Let Attackers Execute Arbitrary Code Remotely

Cybersecuritynews •Abinaya • November 25, 2025

A critical remote code execution (RCE) vulnerability in Microsoft’s Update Health Tools (KB4023057). A widely deployed Windows component designed to expedite security updates through Intune. The flaw stems from the tool connecting to dropped Azure Blob storage accounts that attackers could register and control. How the Vulnerability Works The vulnerability exists in version 1.0 of the Update […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Update Health Tools Vulnerability Enables Remote Code Execution A critical remote code execution vulnerability has been identified in Microsoft’s Update Health Tools (KB4023057), which is widely used to facilitate security updates via Intune. The flaw allows attackers to execute arbitrary code by exploiting connections to compromised Azure Blob storage accounts. This vulnerability affects systems utilizing this Windows component. 3 sources 24

Extracted Entities

Microsoft’s Update Health Tools Configuration Vulnerability Let Attackers Execute Arbitrary Code Remotely

The full story

Extracted Entities

Attack Types (1)

Platforms (2)

Vulnerabilities (1)