CVE-2025-21204

High

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges…

secure@microsoft.com·CWE-59·Published 2025-04-08

CVSS

7.8

EPSS

0.06

KEV

Exploits

cve.orgen

147 chars

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

NVDen

147 chars

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

NVDes

180 chars

La resolución incorrecta de un enlace antes del acceso al archivo ('seguimiento de enlace') en Windows Update Stack permite que un atacante autorizado eleve privilegios localmente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9