AI description
CVE-2025-60718 is an untrusted search path vulnerability found in Windows Administrator Protection. It enables an authorized attacker to elevate their privileges locally on a vulnerable system. Successful exploitation of CVE-2025-60718 allows an attacker to gain elevated privileges, potentially enabling them to execute commands with higher system access levels. Microsoft released security patches as part of the November 2025 Patch Tuesday updates to address this vulnerability.
- Description
- Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.
- Source
- secure@microsoft.com
- NVD status
- Analyzed
- Products
- windows_11_24h2, windows_11_25h2
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- secure@microsoft.com
- CWE-426
- Hype score
- Not currently trending
#Vulnerability #cybersecurity PoC Exploit Releases for CVE-2025-60718 – Windows Administrator Protection Elevation of Privilege Vulnerability https://t.co/7UZB4mMJAE
@Komodosec
5 Jan 2026
33 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🛡️ Google alerta que correção de vulnerabilidade CVE-2025-60718 no Windows 11 é incompleta, permitindo elevação de privilégios, mas Microsoft ignora relatórios detalhados do Projeto Zero. Fonte: Projeto Zero #Windows11Security https://t.co/HDid1Y0Yo3
@j_a_p_a_h__
20 Dec 2025
53 Impressions
1 Retweet
1 Like
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-60718 lets attackers hijack Windows Administrator Protection to gain full control. Learn how the "Shadow Admin" exploit works. PoC Available! #WindowsSecurity #CyberSecurity #InfoSec #PrivEsc #CVE #Microsoft https://t.co/zjHBlCcqKh
@the_yellow_fall
1 Dec 2025
1920 Impressions
9 Retweets
24 Likes
23 Bookmarks
2 Replies
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815",
"versionEndExcluding": "10.0.26100.7092"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140",
"versionEndExcluding": "10.0.26200.7092"
}
],
"operator": "OR"
}
]
}
]