Goal Reached Thanks to every supporter β€” we hit 100%!

Goal: 1000 CNY Β· Raised: 1000 CNY

100.0%

CVE-2025-60710 β€” AI Deep Analysis Summary

CVSS 7.8 Β· High

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A Local Privilege Escalation (LPE) flaw in `Host Process for Windows Tasks`.…

Q2Root Cause? (CWE/Flaw)

πŸ›‘οΈ **Root Cause**: **CWE-59** (Improper Link Resolution Before File Access). The `taskhostw.exe` process deletes directories matching a specific GUID pattern without verifying if they are **symbolic links**.…

Q3Who is affected? (Versions/Components)

πŸ–₯️ **Affected Products**: **Windows 11 Version 25H2** (both ARM64 and x64-based systems). πŸ“¦ **Component**: `Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration` scheduled task.

Q4What can hackers do? (Privileges/Data)

πŸ’€ **Attacker Capabilities**: Elevate privileges from **Low User** to **SYSTEM/Admin**. πŸ”“ Access sensitive data, modify system integrity, and achieve full persistence.…

Q5Is exploitation threshold high? (Auth/Config)

πŸ”“ **Threshold**: **Low/Medium**. πŸ“ **Requirements**: Local access (AV:L), Low Complexity (AC:L), and **Low Privileges** (PR:L) are needed. No user interaction (UI:N) required.…

Q6Is there a public Exp? (PoC/Wild Exploitation)

πŸ’£ **Exploit Status**: **Yes, Public PoC Available**. πŸ“‚ GitHub repo `redpack-kr/CVE-2025-60710` provides proof-of-concept code.…

Q7How to self-check? (Features/Scanning)

πŸ” **Self-Check**: 1. Check if Windows 11 25H2 is installed. 2. Verify the existence of the scheduled task: `Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration`. 3.…

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Official Fix**: **Yes**. Microsoft has released an update. πŸ“… Published: 2025-11-11. πŸ”— Reference: MSRC Update Guide (CVE-2025-60710). Users must apply the latest security patch immediately.

Q9What if no patch? (Workaround)

🚧 **Workaround (No Patch)**: 1. **Disable** the `PolicyConfiguration` scheduled task. 2. Restrict write permissions to `%LOCALAPPDATA%` for low-privilege users (if feasible). 3.…

Q10Is it urgent? (Priority Suggestion)

πŸ”₯ **Urgency**: **HIGH**. 🚨 CVSS Vector is **8.8 (High)**. Since PoC is public and requires only local low-privilege access, immediate patching is critical to prevent system takeover. Do not delay!