CVE-2025-25008
Published: 11 March 2025
Description
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Security Summary
CVE-2025-25008 is a vulnerability involving improper link resolution before file access, known as "link following," in Microsoft Windows. Published on 2025-03-11, it enables an authorized local attacker to elevate privileges and has a CVSS v3.1 base score of 7.1 (High), with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. The issue maps to CWE-59: Improper Link Resolution Before File Access.
A local attacker with low privileges (PR:L) can exploit this vulnerability with low attack complexity and no user interaction required. Successful exploitation allows the attacker to achieve high integrity (I:H) and availability (A:H) impacts, specifically enabling local privilege escalation on the affected Windows system.
Mitigation details are provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25008.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The CVE describes a local privilege escalation vulnerability in Windows due to improper link resolution (CWE-59), directly enabling exploitation to gain higher privileges on the system, which maps to T1068.