← Back to CVEs
CVE-2025-29975
HIGH7.8
Description
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
CVE Details
CVSS v3.1 Score7.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published5/13/2025
Last Modified5/19/2025
Sourcenvd
Honeypot Sightings0
Affected Products
microsoft:pc_manager
Weaknesses (CWE)
CWE-59
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29975(secure@microsoft.com)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.