April 13, 2026 · Applied Cybernetics Group
CVE-2025-60710 Microsoft Windows
known ransomware use
Microsoft Windows Link Following Vulnerability
- Added to KEV
2026-04-13- Federal due date
2026-04-27- Vendor
- Microsoft
- Product
- Windows
- EPSS
- 91.7th percentile (score 0.046, as of
2026-11-06) - NVD CVSS v3.1
- 7.8 (HIGH)
- Ransomware use
- Known
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2025-60710
CISA short description
Microsoft Windows contains a link following vulnerability that allows for privilege escalation
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
NVD description
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.