CVE-2026-25187

High

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.

secure@microsoft.com·CWE-59·Published 2026-03-10

CVSS

7.8

EPSS

0.03

KEV

Exploits

cve.orgen

135 chars

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.

NVDen

135 chars

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.

NVDes

163 chars

Resolución de enlaces incorrecta antes del acceso a archivos ('seguimiento de enlaces') en Winlogon permite a un atacante autorizado elevar privilegios localmente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9