Microsoft has published an advisory for CVE-2025-59502, a Remote Procedure Call (RPC) Denial of Service vulnerability that can allow an unauthenticated or low‑privilege actor to exhaust resources in Windows’ RPC stack and render services unavailable across a network.
Background / Overview...