CVE-2025-60710

Summary dbcve.org

This is a local privilege escalation vulnerability in the Windows Task Scheduler's Host Process. The flaw allows an authorized attacker to manipulate symbolic links to gain elevated privileges. By creating malicious symbolic links before the Task Scheduler service accesses certain files, an attacker can cause the service to read, write, or overwrite sensitive files it normally couldn't access, potentially achieving SYSTEM-level privileges.

Mitigation

Apply the Microsoft security update for CVE-2025-60710 via Windows Update or WSUS. Validate that the Windows Task Scheduler service functions correctly after patching.