Skip to content
OpenAdvisories
High 1 exploited CVE MSRC-CVE-2025-60710 1 CVE

Host Process for Windows Tasks Elevation of Privilege Vulnerability

Published Nov 11, 2025 · Updated Jan 2, 2026 · Revision 4

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Security updates
10.0.26100.7462 — https://support.microsoft.com/help/5072033
10.0.26100.7392 — https://support.microsoft.com/help/5072014

Vulnerabilities 1

Revision history

  1. #4

    Added an acknowledgement. This is an informational change only.

  2. #3

    Added an acknowledgement. This is an informational change only.

  3. #2

    The following updates have been made: 1. To comprehensively address CVE-2025-60710, Microsoft has released December 2025 security updates for all supported editions of Windows 11 Version 24H2, Windows 11 Version 25H2, and Windows Server 2025. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action. 2. Added a Workaround for customers running Windows Server 2025, in the event they cannot immediately install the update.

  4. #1

    Information published.

References