CVE-2025-60709

High · 7.8

CVSS

7.8

EPSS

0.5%

Published

Nov 11, 2025

CISA due date

—

The record

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Ecosystem	Package	Introduced	Fixed