CVE-2025-60710KEV · OVERDUECWE-59

Microsoft Windows Link Following Vulnerability

High · published November 11, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 91.6th percentile for exploit probability.

180
days past CISA
deadline
CVSS v3.1
7.8
EPSS
5%
Percentile
91.6
In the wild
Confirmed
What it is

⚡ An authorized attacker can elevate their privileges locally just by exploiting link resolution! That's right, this vulnerability is like finding a backstage pass to an exclusive concert without permission. 🔥 Think of it as a restaurant where the waiter mistakenly hands you a VIP menu, allowing you to order from the chef’s special dishes, even though you only paid for a basic meal. This improper link resolution grants access to areas of the system that should be off-limits after proper verification. If exploited, an attacker could gain unauthorized access to sensitive system components, altering configurations, escalating privileges, or even executing malicious code. This vulnerability could lead to a compromised system, putting critical data and functionality at risk.

Put simply

Think of it as a restaurant where the waiter mistakenly hands you a VIP menu, allowing you to order from the chef’s special dishes, even though you only paid for a basic meal. This improper link resolution grants access to areas of the system that should be off-limits after proper verification. This vulnerability arises from improper link resolution in the Host Process for Windows Tasks, allowing attackers to bypass safeguards and escalate their access privileges locally. This kind of flaw can lead to significant security breaches if not addressed.

What to do

If exploited, an attacker could gain unauthorized access to sensitive system components, altering configurations, escalating privileges, or even executing malicious code. This vulnerability could lead to a compromised system, putting critical data and functionality at risk. Update your Windows systems to the latest version as soon as possible. Regularly audit user privileges and ensure that security configurations are strictly enforced. Consider implementing additional monitoring to detect unauthorized access attempts. You've got this! With timely action, you'll keep your systems secure and your hero status intact! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04614 · 91.6th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2025-11-11T23:15Z
KEV added
2026-04-13 · due 2026-04-27
Affected products (3)
ProductVersionsFixed in
microsoft/windows_11_24h2< 10.0.26100.739210.0.26100.7392
microsoft/windows_11_25h2< 10.0.26200.739210.0.26200.7392
microsoft/windows_server_2025< 10.0.26100.739210.0.26100.7392
References (4)
EPSS history
Timeline
  • 13 APR 00:00Z
    Added to CISA KEV — remediate by Apr 27
    kev
  • 11 NOV 17:59Z
    Host Process for Windows Tasks Elevation of Privilege Vulnerability
    cvelistv5