Описание
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2025-60710
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-60710
- https://www.vicarius.io/vsociety/posts/cve-2025-60710-detection-script-eop-vulnerability-in-host-process-for-windows-tasks
- https://www.vicarius.io/vsociety/posts/cve-2025-60710-mitigation-script-eop-vulnerability-in-host-process-for-windows-tasks
Связанные уязвимости
CVSS3: 7.8
nvd
10 месяцев назад
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
CVSS3: 7.8
msrc
10 месяцев назад
Host Process for Windows Tasks Elevation of Privilege Vulnerability
CVSS3: 7.8
fstec
10 месяцев назад
Уязвимость компонента Host Process операционных систем Windows, позволяющая нарушителю повысить свои привилегии