VULNERABILITY INTELLIGENCE

CVE-2025-60710

CVSS score7.8 HIGH

EPSS probability4.61%

CISA KEVKnown exploited vulnerability

Published2025-11-11

Last modified2026-10-18

Known Exploited Vulnerability

Microsoft Windows Link Following Vulnerability

Vendor / product: Microsoft / Windows

Description

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.