CVE-2025-60710
7.8 high
KEV · due 2026-04-27
ransomware
exploit ×2
SSVC exploitation: active
Analyzed
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
Fix
Public exploits 2
- Wh04m1001/CVE-2025-60710 PoC on GitHub
- redpack-kr/CVE-2025-60710 PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
CISA KEV required action · due 2026-04-27
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Added to the catalog 2026-04-13. CISA KEV
Patch, vendor advisory and mitigation references on NVD 2
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710 Vendor Advisory
- https://www.vicarius.io/vsociety/posts/cve-2025-60710-mitigation-script-eop-vulnerability-in-host-process-for-windows-tasks Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · in KEV · microsoftNVD modified 2026-10-18 21:10
Affected (CPE criteria) 3
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
References 4
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710 Vendor Advisory
- https://www.vicarius.io/vsociety/posts/cve-2025-60710-detection-script-eop-vulnerability-in-host-process-for-windows-tasks Third Party Advisory
- https://www.vicarius.io/vsociety/posts/cve-2025-60710-mitigation-script-eop-vulnerability-in-host-process-for-windows-tasks Mitigation, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-60710 US Government Resource