Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2025-21204

Description

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

POC

Reference

- https://www.vicarius.io/vsociety/posts/cve-2025-21204-privilege-elevation-vulnerability-in-microsoft-windows-update-stack-detection-script

- https://www.vicarius.io/vsociety/posts/cve-2025-21204-privilege-elevation-vulnerability-in-microsoft-windows-update-stack-mitigation-script

Github

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/AlexRogalskiy/AlexRogalskiy

- https://github.com/Ouniel/cve-dection

- https://github.com/crisprss/CVEs

- https://github.com/hackerhouse-opensource/exploits

- https://github.com/mmotti/Reset-inetpub

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/tanjiti/sec_profile