This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: A Local Privilege Escalation (LPE) flaw in `Host Process for Windows Tasks`.โฆ
๐ก๏ธ **Root Cause**: **CWE-59** (Improper Link Resolution Before File Access). The `taskhostw.exe` process deletes directories matching a specific GUID pattern without verifying if they are **symbolic links**.โฆ
๐ฅ๏ธ **Affected Products**: **Windows 11 Version 25H2** (both ARM64 and x64-based systems). ๐ฆ **Component**: `Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration` scheduled task.
Q4What can hackers do? (Privileges/Data)
๐ **Attacker Capabilities**: Elevate privileges from **Low User** to **SYSTEM/Admin**. ๐ Access sensitive data, modify system integrity, and achieve full persistence.โฆ
๐ **Threshold**: **Low/Medium**. ๐ **Requirements**: Local access (AV:L), Low Complexity (AC:L), and **Low Privileges** (PR:L) are needed. No user interaction (UI:N) required.โฆ
๐ **Self-Check**: 1. Check if Windows 11 25H2 is installed. 2. Verify the existence of the scheduled task: `Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration`. 3.โฆ
๐ฉน **Official Fix**: **Yes**. Microsoft has released an update. ๐ Published: 2025-11-11. ๐ Reference: MSRC Update Guide (CVE-2025-60710). Users must apply the latest security patch immediately.
Q9What if no patch? (Workaround)
๐ง **Workaround (No Patch)**: 1. **Disable** the `PolicyConfiguration` scheduled task. 2. Restrict write permissions to `%LOCALAPPDATA%` for low-privilege users (if feasible). 3.โฆ
๐ฅ **Urgency**: **HIGH**. ๐จ CVSS Vector is **8.8 (High)**. Since PoC is public and requires only local low-privilege access, immediate patching is critical to prevent system takeover. Do not delay!