CVE-2025-60718
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
An untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access may exploit the flaw to gain higher privileges on the system.
Recommendation
Install Windows security updates containing the fix for this vulnerability.
Other vulnerabilities in Windows Administrator Protection
See all- CVE-2026-42829High
Improper access control vulnerability in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally.
- CVE-2025-60721High
A privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS