Exploitation Summary
EIP tracks 3 public exploits for CVE-2025-48799. PoCs published by Wh04m1001, gmh5225, painoob.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-48799, an elevation of privilege vulnerability in the Windows Update service. The exploit leverages arbitrary folder deletion via symbolic link manipulation when Storage Sense is configured to use a secondary drive, leading to local privilege escalation.
Description
Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.
Exploits (3)
This repository contains a functional exploit for CVE-2025-48799, an elevation of privilege vulnerability in the Windows Update service. The exploit leverages arbitrary folder deletion via symbolic link manipulation when Storage Sense is configured to use a secondary drive, leading to local privilege escalation.
This repository contains a functional proof-of-concept exploit for CVE-2025-48799, targeting an integer overflow vulnerability in Apache Tomcat 9.0.48's HTTP header parser. The exploit crafts a malformed 'X-Forwarded' header to trigger memory corruption and execute shellcode.
This repository contains a functional proof-of-concept exploit for CVE-2025-48799, an elevation of privilege vulnerability in the Windows Update service. The exploit leverages arbitrary folder deletion via symbolic link manipulation when Storage Sense is configured to use a secondary drive.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H