Microsoft Patches Multiple MSMQ Flaws Including Remote Code Execution Bug

Microsoft released security updates for Microsoft Message Queuing (MSMQ) to address three disclosed vulnerabilities affecting the Windows messaging component. The issues include CVE-2024-49122, a remote code execution flaw, alongside CVE-2025-21181 and CVE-2025-21289, both classified as denial-of-service vulnerabilities in MSMQ.

The advisories indicate that organizations running systems with MSMQ enabled should review Microsoft's Security Update Guide entries and apply the relevant patches to reduce the risk of service disruption or potential code execution. The combination of one RCE bug and two DoS flaws highlights continued security exposure in MSMQ, a legacy Windows feature that may remain active in enterprise environments even when it is not widely used.