PKCERT has issued a critical security advisory of a remote code execution (RCE) vulnerability in Windows Server Update Services.