CVE-2025-60710

CVE-2025-60710 これは、スケジュールタスク \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration におけるローカル特権昇格の脆弱性のPoCです。 このスケジュールタスクが開始されると、taskhostw.exeプロセスは、C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP ディレクトリを開き、次のフィルターを使用してディレクトリを検索しようとします:...

The vulnerability of the taskhost.exe/taskhostw.exe executable files on Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the taskhost.exe/taskhostw.exe executable files on Windows operating systems is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2025-46473

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An issue exists that allows for local privilege escalation. The problem stems from improper link resolution before file access 'link following' within the Host Process for Windows...