All articles tagged with #msmq
Microsoft's December 2025 security update causes MSMQ failures on older Windows systems, affecting enterprise environments by disrupting message queuing and related services due to permission issues, with workarounds including support contact or uninstalling the update.
Microsoft's December 2025 security updates have caused Message Queuing (MSMQ) failures on certain Windows systems, due to changes in security permissions that restrict write access to a system folder, impacting enterprise applications and IIS websites. Microsoft is investigating but has not yet provided a fix, and affected users may need to consider rolling back updates.
New security flaws in Citrix Virtual Apps and Desktop could allow unauthenticated remote code execution (RCE) due to misconfigured MSMQ permissions and the use of BinaryFormatter for deserialization. The vulnerabilities, CVE-2024-8068 and CVE-2024-8069, require attackers to be authenticated users within the same Windows Active Directory domain. Citrix has released patches for affected versions, and Microsoft advises against using BinaryFormatter due to its security risks.
Microsoft has patched a critical vulnerability in the Windows Message Queuing (MSMQ) middleware service that could allow unauthenticated attackers to gain remote code execution on unpatched Windows servers. The flaw affects all currently supported releases of Windows and can be exploited using specially crafted malicious MSMQ packets. Over 360,000 Internet-exposed servers running the MSMQ service are potentially vulnerable to attacks. Microsoft advises admins to deploy the patch or disable the Windows MSMQ service to remove the attack vector.