You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
link following vulnerability
About this tag
The link following vulnerability tag on WindowsForum.com covers discussions about CWE-59, a local privilege escalation weakness where an attacker exploits improper link resolution before file access. Tagged content includes CVE-2025-59241, a high-severity elevation-of-privilege bug in the Windows Health and Optimized Experiences service (whesvc). This vulnerability allows an authenticated local user to gain higher rights through symlink or path-based attacks on unpatched systems. The tag focuses on Windows-specific security issues involving symbolic links, file access, and local privilege escalation, with an emphasis on Microsoft patches and CVEs.
Microsoft has recorded CVE-2025-59241 as an elevation‑of‑privilege bug in the newly introduced Windows Health and Optimized Experiences service (whesvc), and the initial vendor and aggregator records assign it a High severity (CVSS 3.1 = 7.8) with the underlying weakness classed as CWE‑59...