CVE-2025-60721CWE-270

CVE-2025-60721

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

⚡ A tricky privilege context switching error in Windows Administrator Protection is like a bouncer who lets in anyone with a smile, no questions asked! Think of it as a club where the security guard forgets to check IDs, allowing anyone dressed well enough to waltz right in. In this case, an authorized attacker could slip past security and gain elevated privileges, granting them access to areas they shouldn't be in. This could lead to an absolute nightmare for your system—an attacker could modify settings, access sensitive data, or even install malicious software with administrative rights. The stakes are high, as this vulnerability could compromise the entire system's integrity and security.

Put simply

Think of it as a club where the security guard forgets to check IDs, allowing anyone dressed well enough to waltz right in. In this case, an authorized attacker could slip past security and gain elevated privileges, granting them access to areas they shouldn't be in. CVE-2025-60721 results from a flaw in the Windows Administrator Protection system that fails to properly manage privilege context switches, allowing an attacker with limited access to elevate their privileges locally.

What to do

This could lead to an absolute nightmare for your system—an attacker could modify settings, access sensitive data, or even install malicious software with administrative rights. The stakes are high, as this vulnerability could compromise the entire system's integrity and security. To safeguard against this vulnerability, ensure that your Windows system is updated to the latest patch. Regularly audit user permissions and apply the principle of least privilege to limit access rights. Consider implementing additional monitoring to detect any unauthorized privilege escalations. You've got this! Take these steps and you'll be back in control in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.3th percentile
Weakness
CWE-270 · Privilege Context Switching Error
Published
2025-11-11T23:15Z
Affected products (2)
ProductVersionsFixed in
microsoft/windows_11_24h2< 10.0.26100.709210.0.26100.7092
microsoft/windows_11_25h2< 10.0.26200.709210.0.26200.7092
References (1)
EPSS history
Timeline
  • 11 NOV 17:59Z
    Windows Administrator Protection Elevation of Privilege Vulnerability
    cvelistv5