CVE-2025-60710NVD

Vulnerability Summary

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

Severity Level

HIGH(7.8)

Published Date

Nov 11, 2025

Last Modified

Apr 14, 2026

Exploitation Status

????

EPSS Score (30-Day)

29.87%Probability

Root Weakness (CWE)

CWE-59: Unknown/Unlisted Weakness ↗

Refer to the official MITRE database for detailed architectural specifications regarding this weakness.

CVSS v3.1 Base Metrics

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

External References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710
https://www.vicarius.io/vsociety/posts/cve-2025-60710-detection-script-eop-vulnerability-in-host-process-for-windows-tasks
https://www.vicarius.io/vsociety/posts/cve-2025-60710-mitigation-script-eop-vulnerability-in-host-process-for-windows-tasks
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-60710

Critical Alert 1 Active Exploit Detected Today

CVE Watchtower

CVE-2025-60710NVD

Vulnerability Summary

External References