What is the CVSS score of EUVD-2025-20603?

EUVD-2025-20603 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Windows 10 1607 are affected by EUVD-2025-20603?

CVE-2025-48799 is a privilege escalation vulnerability in Windows Update Service that allows authenticated local attackers to gain elevated system privileges through improper link resolution.. A patch is available.

Is there a public PoC exploit available for EUVD-2025-20603?

Yes, a public proof-of-concept exploit is available for EUVD-2025-20603. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate EUVD-2025-20603?

Within 24 hours: Inventory all Windows systems running Windows Update Service and verify current patch status. Within 7 days: Apply vendor-released patches to all affected Windows systems; test patches in non-production environment first. Within 30 days: Audit local user access policies and implement principle of least privilege for standard user accounts to reduce the attack surface for privilege escalation vectors.

Windows 10 1607 EUVD-2025-20603

| CVE-2025-48799 HIGH

Improper Link Resolution Before File Access (CWE-59)

2025-07-08 secure@microsoft.com

Microsoft Information Disclosure Windows 10 1607 Windows 11 24h2 Windows 11 22h2 Windows 10 1809 Windows 11 23h2 Windows 10 22h2 Windows 10 21h2 Windows Server 2025 Windows

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:32 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

10.0.26100.4652,10.0.22631.5624,10.0.19044.6093

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20603

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

PoC Detected

Sep 26, 2025 - 17:23 vuln.today

Public exploit code

CVE Published

Jul 08, 2025 - 17:15 nvd

HIGH 7.8

DescriptionCVE.org

Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.

Analysis

Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.

Technical ContextAI

This vulnerability is classified as Improper Link Resolution Before File Access (CWE-59).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

More in Windows 10 1607

View all

CVE-2025-33053 HIGH Act Now POC

8.8 Jun 10

Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables

CVE-2025-33073 HIGH Act Now POC

8.8 Jun 10

Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker

CVE-2025-21293 HIGH Act Now POC

8.8 Jan 14

Active Directory Domain Services contains an elevation of privilege vulnerability that allows authenticated domain users

CVE-2025-30397 HIGH Act Now POC

7.5 May 13

Microsoft Scripting Engine contains a type confusion vulnerability allowing unauthorized remote code execution over the

CVE-2025-32706 HIGH Act Now POC

7.8 May 13

Windows CLFS Driver contains an input validation flaw enabling local privilege escalation, yet another CLFS kernel vulne

CVE-2025-21418 HIGH Act Now

7.8 Feb 11

Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow enabling local privilege escalation

CVE-2026-21510 HIGH Act Now POC

8.8 Feb 10

Windows Shell contains a protection mechanism failure (CVE-2026-21510, CVSS 8.8) that allows unauthenticated remote atta

CVE-2025-47827 MEDIUM This Month POC

4.6 Jun 05

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptograph

CVE-2026-21519 HIGH Act Now

7.8 Feb 10

Desktop Window Manager (DWM) in Windows contains a type confusion vulnerability (CVE-2026-21519, CVSS 7.8) that enables

CVE-2025-32701 HIGH Act Now

7.8 May 13

Windows Common Log File System Driver contains another use-after-free for local privilege escalation, the latest in a se

CVE-2025-21391 HIGH Act Now

7.1 Feb 11

Windows Storage contains an elevation of privilege vulnerability through symlink following that allows authorized attack

CVE-2025-32709 HIGH Act Now

7.8 May 13

Windows Ancillary Function Driver for WinSock contains a use-after-free enabling local privilege escalation through a nu

Same weakness CWE-59 – Improper Link Resolution Before File Access

View all

CVE-2015-1130 HIGH POC

7.8

CVE-2026-41091 HIGH POC

7.8

CVE-2016-6664 HIGH POC

7.0

CVE-2025-60710 HIGH POC

7.8

CVE-2024-57728 HIGH POC

7.2

CVE-2025-21391 HIGH

7.1

CVE-2025-48384 HIGH

8.0

CVE-2024-28189 CRITICAL POC

10.0

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

EUVD-2025-20603 vulnerability details – vuln.today

Back

Windows 10 1607 EUVD-2025-20603

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More in Windows 10 1607

Same weakness CWE-59 – Improper Link Resolution Before File Access

Same technique Information Disclosure

Share

External POC / Exploit Code