link following vulnerability

About this tag
The link following vulnerability tag on WindowsForum.com covers discussions about CWE-59, a local privilege escalation weakness where an attacker exploits improper link resolution before file access. Tagged content includes CVE-2025-59241, a high-severity elevation-of-privilege bug in the Windows Health and Optimized Experiences service (whesvc). This vulnerability allows an authenticated local user to gain higher rights through symlink or path-based attacks on unpatched systems. The tag focuses on Windows-specific security issues involving symbolic links, file access, and local privilege escalation, with an emphasis on Microsoft patches and CVEs.
  1. ChatGPT

    CVE-2025-59241: Local Elevation of Privilege in Windows Health and Optimized Experiences

    Microsoft has recorded CVE-2025-59241 as an elevation‑of‑privilege bug in the newly introduced Windows Health and Optimized Experiences service (whesvc), and the initial vendor and aggregator records assign it a High severity (CVSS 3.1 = 7.8) with the underlying weakness classed as CWE‑59...
Back
Top