CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability

...

CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability

...

CVE-2025-48799

CVE-2025-48799 is an Elevation of Privilege flaw in Windows Update Service (wuauserv) described as: improper link resolution before file access ('link following') can allow an authorized local attacker to elevate to NT AUTHORITY\SYSTEM when Windows 10/11 systems have at least two drives and Stora...

CVE-2025-48799

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:37:25+00:00| seen| https://t.me/proxybar/2668 2025-07-08 21:14:59+00:00| published-proof-of-concept|...

Exploit for Link Following in Microsoft

Description This is PoC for CVE-2025-48799, an elevation of pr...