{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability/$entity","id":"00000000-0000-0000-0000-0000e180b667","releaseDate":"2025-11-11T08:00:00-08:00","cveNumber":"CVE-2025-60710","cveTitle":"Host Process for Windows Tasks Elevation of Privilege Vulnerability","releaseNumber":"2025-Nov","vulnType":"Security Vulnerability","latestRevisionDate":"2026-01-02T08:00:00-08:00","description":"

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

\n","cweList":["CWE-59: Improper Link Resolution Before File Access ('Link Following')"],"cweDetailsListForSearch":["cwe: CWE-59: Improper Link Resolution Before File Access ('Link Following')","cweUrl: https://cwe.mitre.org/data/definitions/59.html"],"unformattedDescription":"Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.","mitreText":"CVE-2025-60710","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2025-60710","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Host Process for Windows Tasks","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"7.8","temporalScore":"6.8","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-59: Improper Link Resolution Before File Access ('Link Following')","https://cwe.mitre.org/data/definitions/59.html"]}],"articles":[{"title":"Host Process for Windows Tasks Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

\n","ordinal":10000},{"title":"Host Process for Windows Tasks Elevation of Privilege Vulnerability","articleType":"100000000","description":"

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

\n","ordinal":10000},{"articleType":"FAQ","description":"

What privileges could be gained by an attacker who successfully exploited this vulnerability?

\n

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

\n","ordinal":10000},{"articleType":"Workaround","description":"

The following workaround might be helpful in your situation. In all cases, Microsoft strongly recommends that you install the updates for this vulnerability as soon as possible:

\n

Customers running Windows Server 2025 who have Desktop Experience installed are affected by this vulnerability. To protect yourself you can disable the following task in Task Scheduler:

\n

\\Microsoft\\Windows\\WindowsAI\\Recall\\PolicyConfiguration

\n

You should reenable the task once you have installed the fix.

\n

Important: Do NOT undo the workaround until after you have installed the update.

\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2025-60710","version":1,"revisionDate":"2025-11-11T08:00:00-08:00","initialDate":"0001-01-01T00:00:00Z","description":"

Information published.

\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"cd681eeb-2ba9-f011-938f-000d3ac5fb71"},{"cveNumber":"CVE-2025-60710","version":2,"revisionDate":"2025-12-09T08:00:00-08:00","initialDate":"0001-01-01T00:00:00Z","description":"

The following updates have been made:

\n
    \n
  1. To comprehensively address CVE-2025-60710, Microsoft has released December 2025 security updates for all supported editions of Windows 11 Version 24H2, Windows 11 Version 25H2, and Windows Server 2025. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.
    2. \n
  2. Added a Workaround for customers running Windows Server 2025, in the event they cannot immediately install the update.
    3. \n
\n","unformattedDescription":"The following updates have been made: \n\n1. To comprehensively address CVE-2025-60710, Microsoft has released December 2025 security updates for all supported editions of Windows 11 Version 24H2, Windows 11 Version 25H2, and Windows Server 2025. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.\n2. Added a Workaround for customers running Windows Server 2025, in the event they cannot immediately install the update.","notificationNeeded":true,"notificationSent":true,"sourceId":"91dc3dba-4bd5-f011-9395-000d3ac5fb71"},{"cveNumber":"CVE-2025-60710","version":2.1,"revisionDate":"2025-12-11T08:00:00-08:00","initialDate":"0001-01-01T00:00:00Z","description":"

Added an acknowledgement. This is an informational change only.

\n","unformattedDescription":"Added an acknowledgement. This is an informational change only.","notificationNeeded":false,"notificationSent":false,"sourceId":"d5fadfd0-e3d6-f011-9395-000d3ac5fb71"},{"cveNumber":"CVE-2025-60710","version":2.2,"revisionDate":"2026-01-02T08:00:00-08:00","initialDate":"0001-01-01T00:00:00Z","description":"

Added an acknowledgement. This is an informational change only.

\n","unformattedDescription":"Added an acknowledgement. This is an informational change only.","notificationNeeded":false,"notificationSent":false,"sourceId":"bac216b7-0ae8-f011-9398-000d3ac5fb71"}]}