High · published November 11, 2025
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 91.6th percentile for exploit probability.
⚡ An authorized attacker can elevate their privileges locally just by exploiting link resolution! That's right, this vulnerability is like finding a backstage pass to an exclusive concert without permission. 🔥 Think of it as a restaurant where the waiter mistakenly hands you a VIP menu, allowing you to order from the chef’s special dishes, even though you only paid for a basic meal. This improper link resolution grants access to areas of the system that should be off-limits after proper verification. If exploited, an attacker could gain unauthorized access to sensitive system components, altering configurations, escalating privileges, or even executing malicious code. This vulnerability could lead to a compromised system, putting critical data and functionality at risk.
Think of it as a restaurant where the waiter mistakenly hands you a VIP menu, allowing you to order from the chef’s special dishes, even though you only paid for a basic meal. This improper link resolution grants access to areas of the system that should be off-limits after proper verification. This vulnerability arises from improper link resolution in the Host Process for Windows Tasks, allowing attackers to bypass safeguards and escalate their access privileges locally. This kind of flaw can lead to significant security breaches if not addressed.
If exploited, an attacker could gain unauthorized access to sensitive system components, altering configurations, escalating privileges, or even executing malicious code. This vulnerability could lead to a compromised system, putting critical data and functionality at risk. Update your Windows systems to the latest version as soon as possible. Regularly audit user privileges and ensure that security configurations are strictly enforced. Consider implementing additional monitoring to detect unauthorized access attempts. You've got this! With timely action, you'll keep your systems secure and your hero status intact! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |