CVE-2025-48799

Published Jul 8, 2025

Last updated 5 days ago

Windows Update Service

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-48799 is an Elevation of Privilege vulnerability in the Windows Update Service. The vulnerability stems from improper link resolution, also known as a 'link following' flaw. If exploited, an attacker with local access could escalate their privileges on a local machine. The vulnerability is due to the Windows Update Service not adequately verifying symbolic links or junctions before accessing files. An attacker could create a symbolic link to a system file, causing the update service to perform actions on that file with elevated permissions.

Description: Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.
Source: secure@microsoft.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

secure@microsoft.com: CWE-59

Hype score: Not currently trending

References