CVE-2025-60721

HighCVSS 7.8

Published: 11/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

A privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with local access could elevate privileges, potentially leading to system compromise. This affects confidentiality, integrity, and availability.

Recommendation

Apply the security updates provided by Microsoft for Windows. Restrict local access to trusted users.

Other vulnerabilities in Windows Administrator Protection

See all

CVE-2026-42829High
Improper access control vulnerability in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally.
CVE-2025-60718High
An untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS