CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability

🗓️ 08 Jul 2025 16:57:36Reported by microsoftType

Windows Update Service allows elevation of privilege due to a security vulnerability

Reporter	Title	Published	Views	Family All 30
Information Security Automation	August “In the Trend of VM” (#18): vulnerabilities in Microsoft Windows and SharePoint	12 Aug 202515:47	–	avleonov
Information Security Automation	July Microsoft Patch Tuesday	16 Jul 202517:41	–	avleonov
Information Security Automation	About Elevation of Privilege – Windows Update Service (CVE-2025-48799) vulnerability	6 Aug 202522:44	–	avleonov
BDU FSTEC	The vulnerability of the Windows operating system update service allows a hacker to elevate their privileges to a system level.	9 Jul 202500:00	–	bdu_fstec
GithubExploit	Exploit for Link Following in Microsoft	8 Jul 202515:26	–	githubexploit
GithubExploit	Exploit for Link Following in Microsoft	5 Aug 202513:22	–	githubexploit
GithubExploit	Exploit for Link Following in Microsoft	22 Sep 202521:54	–	githubexploit
Circl	CVE-2025-48799	8 Jul 202515:56	–	circl
CNNVD	Microsoft Windows Update 后置链接漏洞	8 Jul 202500:00	–	cnnvd
CVE	CVE-2025-48799	8 Jul 202516:57	–	cve

[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.8246",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.7558",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19044.0",
        "lessThan": "10.0.19044.6093",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 22H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19045.0",
        "lessThan": "10.0.19045.6093",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 22H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22621.0",
        "lessThan": "10.0.22621.5624",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 22H3",
    "platforms": [
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.5624",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 23H2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.5624",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 24H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.4652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.4652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.4652",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48799

13 Feb 2026 19:07Current

CVSS 3.17.8

EPSS0.02894

CWE-59