Improper link resolution before file access (‘link following’) in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2025-21204 Windows Process Activation Elevation of Privilege Vulnerability
Published April 8, 2025