CVE-2025-60710

Microsoft Windows is actively exploited for privilege escalation via CVE-2025-60710, a link-following flaw enabling unauthorized admin access.

This vulnerability allows attackers to escalate privileges by following malicious links, bypassing standard Windows security controls. DIB organizations must immediately patch all Windows systems to prevent unauthorized access to classified or sensitive data, as the flaw is already being weaponized in the wild.

Shame score — Active exploitation of a Windows privilege escalation flaw indicates a critical gap in vendor security posture and widespread compliance risk for defense contractors.