CVE-2025-60710: listed in the CISA KEV catalog

CVE-2025-60710 · CVSS 7.8 HIGH · EPSS 5% · KEV 2026-04-13

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

Is CVE-2025-60710 exploited?

• Listed in the CISA KEV catalog on 2026-04-13.
• Federal remediation due 2026-04-27.
• Past that date by 156 days.
• EPSS puts exploitation in the next 30 days at 5%.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2025-60710

• CISA Confirms Windows Task Host Ransomware Exploitation (2026-08-19)
• Windows Task Host Flaw Gives Local Users SYSTEM (2026-04-16)
• Federal Systems Still Exposed to Decade-Old Microsoft Vulnerabilities (2026-04-14)
• Attackers Exploit Both Decade-Old and New Flaws in Federal Systems (2026-04-08)

Primary sources

• NVD record
• CISA KEV catalog

What this record does not say

• No affected package data.
• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-09-09.