Microsoft · Windows Update Service · CVE-2025-48799
**Name of the Vulnerable Software and Affected Versions**
Windows versions prior to July 8, 2025
**Description**
An improper link resolution vulnerability exists in the Windows Update Service before file access. This allows an authorized attacker to elevate privileges locally. The vulnerability affects Windows 10 and Windows 11 clients with at least two hard drives. The `wuauserv` service is involved, and the vulnerability relates to incorrect handling of symbolic links during file access, potentially enabling arbitrary file deletion and privilege escalation.
**Recommendations**
Update your systems to the latest version available before July 8, 2025, to address this vulnerability.