MSRC-CVE-2025-48799 — Windows Update Service Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could create, modify, or delete files in the security context of the "NT AUTHORITY\SYSTEM" account.

Security updates
10.0.17763.7558 — https://support.microsoft.com/help/5062557
10.0.19044.6093 — https://support.microsoft.com/help/5062554
10.0.22621.5624 — https://support.microsoft.com/help/5062552
10.0.26100.4652 — https://support.microsoft.com/help/5062553
10.0.14393.8246 — https://support.microsoft.com/help/5062560

Vulnerabilities 1

High 7.8

CVE-2025-48799 Public exploit

Windows Update Service Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.

Microsoft Windows 10 Version 1809 Windows 10 Version 21H2 Windows 10 Version 1607 Windows

Jul 8, 2025

Revision history

2025-07-08 #1
Information published.

References

CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48799
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss