In CISA KEV7.8 HighCWE-59Ransomware use
CVE-2025-60710
Microsoft Windows Link Following Vulnerability
MicrosoftWindows
Status
- Exploited in the wild
- In CISA KEV since 13 Apr
- Vendor fix available
- Known ransomware use
Federal deadlineMon 27 Apr, 23:59 UTC
Passed 180 days ago
CISA KEV · added 13 Apr
Exploit probabilityEPSSchecked 24 Oct
4.6%probability of exploitation in the next 30 days
Higher than 92% of scored CVEs
SeverityCVSS
7.8High
Description NVD
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 5 articles · 4 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 13 Apr · 21:24 UTC | CISA | CISA flags Windows link flaw CVE-2025-60710 as actively exploited |
| Mon 13 Apr · 22:05 UTC | CISA | CISA flags Windows link flaw CVE-2025-60710 as actively exploited |
| Tue 14 Apr · 06:31 UTC | The Hacker News | CISA adds six KEV flaws amid active Fortinet exploits |
| Tue 14 Apr · 08:11 UTC | Security Affairs | CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog |
| Tue 14 Apr · 09:17 UTC | SecurityWeek | Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities |
- Organizations Warned of Exploited Windows, Adobe Acrobat VulnerabilitiesSecurityWeek · mentions it in passing
- CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV CatalogSecurity Affairs · mentions it in passing
- CISA adds six KEV flaws amid active Fortinet exploitsThe Hacker News · mentions it in passing
- CISA flags Windows link flaw CVE-2025-60710 as actively exploitedCISA · official notice
- CISA flags Windows link flaw CVE-2025-60710 as actively exploitedCISA · first in our coverage · official notice