Product:
Windows Administrator Protection
Summary
Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can gain higher privileges than intended, potentially compromising the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-60718 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system. By manipulating the search path used by the Windows Administrator Protection, the attacker can execute malicious code with elevated privileges. This can be achieved by placing a malicious executable in a location that is prioritized in the search path, allowing it to run instead of the legitimate application.
Affected Products
- Windows Administrator Protection: Vulnerable to privilege escalation due to untrusted search path.
Mitigation
To mitigate this vulnerability, it is recommended to ensure that the search paths used by Windows Administrator Protection are secure and do not include untrusted locations. Regularly updating the system and applying security patches can also help protect against potential exploitation.