CVE-2025-60710

Host Process for Windows Tasks Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

Affected

Microsoft · Windows 11 Version 24H2 · Windows 11 Version 25H2 · Windows Server 2025 · Windows Server 2025 (Server Core installation)

CVSS v3.1 MICROSOFT

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

4.61% chance of exploitation in the next 30 days, 92nd percentile

CISA KEV

added 2026-04-13, used in ransomware campaigns

Published

2025-11-11

Updated

2026-08-15

Proof-of-concept exploits (2)

• Wh04m1001/CVE-2025-607106★ · 2025-11-11
• redpack-kr/CVE-2025-6071025★ · 2025-11-11

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710
• https://www.vicarius.io/vsociety/posts/cve-2025-60710-detection-script-eop-vulnerability-…
• https://www.vicarius.io/vsociety/posts/cve-2025-60710-mitigation-script-eop-vulnerability…

References

• CVE Record
• NVD entry

Related

• CVE-2021-36934
• CVE-2022-3368
• CVE-2023-20178
• CVE-2023-21752
• CVE-2023-29343
• CVE-2023-36723