CVE-2025-59510

MEDIUM

Microsoft Windows 10 1607 < 10.0.14393.8594 - Symlink Following

Title source: rule
STIX 2.1

Description

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally.

References (1)

Scores

CVSS v3 5.5
EPSS 0.0005
EPSS Percentile 14.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-59
Status published
Products (13)
microsoft/windows_10_1607 < 10.0.14393.8594 (2 CPE variants)
microsoft/windows_10_1809 < 10.0.17763.8027 (2 CPE variants)
microsoft/windows_10_21h2 < 10.0.19044.6575
microsoft/windows_10_22h2 < 10.0.19045.6575
microsoft/windows_11_23h2 < 10.0.22631.6199
microsoft/windows_11_24h2 < 10.0.26100.7092
microsoft/windows_11_25h2 < 10.0.26200.7092
microsoft/windows_server_2012 r2
microsoft/windows_server_2016 < 10.0.14393.8594
microsoft/windows_server_2019 < 10.0.17763.8027
... and 3 more
Published Nov 11, 2025
Tracked Since Feb 18, 2026