VulnerabilityBleeping Computer
8.8 — CRITICAL
CISA: Windows Task Host flaw now exploited by ransomware gangs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Ransomware gangs are exploiting a high-severity Windows Task Host vulnerability (CVE-2025-60710) that was patched by Microsoft in November 2025, allowing local attackers with basic user permissions to gain SYSTEM privileges and take full control of unpatched devices.
⚙️Technical Details
CVEs
CVE-2025-60710CVE-2026-45659
Affected Systems
Microsoft Windows 11 24H2Microsoft Windows 11 25H2Microsoft Windows Server 2025Microsoft Sharepoint Server
Attack Vectors
LOCALNETWORK
💥Impact Assessment
Severity: HIGH
Who Is at Risk
Federal Civilian Executive Branch (FCEB) agencies and potentially other organizations with unpatched devices running affected systems.
🛡️Recommended Actions
1Apply mitigations per vendor instructions for Windows Task Host vulnerability
2Follow applicable BOD 22-01 guidance for cloud services
3Discontinue use of the product if mitigations are unavailable
📦Affected Products
Microsoft Windows 11 24H2Microsoft Windows 11 25H2Microsoft Windows Server 2025Microsoft Sharepoint Server
🔐NVD Verified DataVERIFIED
CVE-2025-60710 ↗CVSS 7.8 — HIGH
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-59
Affected Products (CPE)
Microsoft Windows 11 24H2Microsoft Windows 11 25H2Microsoft Windows Server 2025
CVE-2026-45659 ↗CVSS 8.8 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-502
Affected Products (CPE)
Microsoft Sharepoint Server
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.