KEV · Actively exploited

CVE-2025-60710

CVE-2025-60710 is actively exploited (CISA KEV catalog) : high severity (CVSS 7.8), 0 tracked apps concerned, none still exposed on their current version.

Severity (CVSS): 7.8
Exploitation: Confirmed
Tracked apps: 0
Still exposed: 0

Published on 2025-11-11

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

Attack vector : Local No user interaction

Show raw CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS 4.61% predictive model; CISA confirms active exploitation percentile 91.8%

CISA Known Exploited Vulnerability

Added to KEV: 2026-04-13
Remediation deadline: 2026-04-27
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Ransomware: Yes, known ransomware campaign

OS versions that fix this CVE

This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.

Windows Server 2025 Fixed in 10.0.26100.7462
Windows 11 25H2 · 2025-H2 Fixed in 10.0.26200.7462
Windows 11 24H2 · 2024-H2 Fixed in 10.0.26100.7462

View on NVD ↗ CISA KEV catalog ↗ Advisory · msrc.microsoft.com Advisory · www.vicarius.io

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM