CVE-2025-48799

Name of the Vulnerable Software and Affected Versions Windows versions prior to July 8, 2025

Description An improper link resolution vulnerability exists in the Windows Update Service before file access. This allows an authorized attacker to elevate privileges locally. The vulnerability affects Windows 10 and Windows 11 clients with at least two hard drives. The wuauserv service is involved, and the vulnerability relates to incorrect handling of symbolic links during file access, potentially enabling arbitrary file deletion and privilege escalation.

Recommendations Update your systems to the latest version available before July 8, 2025, to address this vulnerability.