CVE Vulnerability Advisory Database

[Affected Scope] Microsoft Windows operating systems utilizing the Windows Update Stack

[Impact] A local authorized attacker can exploit improper link resolution to elevate privileges to SYSTEM, leading to complete system compromise

[Mitigation] Apply the official Microsoft security updates immediately, or restrict local symbolic link creation privileges as a temporary mitigation

[Affected Scope] Windows operating system environments with Microsoft Defender enabled

[Impact] A local authorized attacker can exploit symbolic link resolution to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the host

[Mitigation] Immediately apply the official Microsoft security updates and ensure the Defender engine and definitions are updated to the latest versions

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-60710

[Impact] Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate pr...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-57728

[Impact] SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Automatic Bug Reporting Tool (ABRT) versions prior to 2.7.1 installed on Red Hat Enterprise Linux and Oracle Linux systems

[Impact] Local attackers with limited privileges can exploit a symlink attack to gain root privileges and achieve full system compromise

[Mitigation] Upgrade ABRT packages to version 2.7.1 or higher, or temporarily disable the abrt-ccpp service