CISA orders FCEB remediation for CVE-2025-60710
Public Sector Action
Summary
Hide ▲
Show ▼
CISA added CVE-2025-60710 to its actively exploited catalog and gave FCEB agencies two weeks to secure systems under BOD 22-01. The move targets a Windows Task Host link-following privilege-escalation flaw affecting Windows 11 and Windows Server 2025. Because the flaw can let local attackers reach SYSTEM privileges, the directive raises the urgency of patching across federal civilian networks.
Related Happenings
Windows User Profile Service arbitrary hive load elevation of privileges privilege-escalation flaw
Vulnerability
H score11
First: 15.07.2026 14:07
Last: 15.07.2026 14:07
Sources 1
About this happening:
A new LegacyHive proof-of-concept exposes a Windows User Profile Service (ProfSvc) arbitrary hive-load elevation-of-privileges flaw on supported Windows desktop and...
Windows User Profile Service arbitrary hive load elevation of privileges privilege-escalation flaw
VulnerabilityAbout this happening: A new LegacyHive proof-of-concept exposes a Windows User Profile Service (ProfSvc) arbitrary hive-load elevation-of-privileges flaw on supported Windows desktop and...
Active Directory Federation Services actively exploited elevation of privilege privilege-escalation flaw (CVE-2026-56155)
Vulnerability
H score29
First: 14.07.2026 21:01
Last: 14.07.2026 21:01
Sources 1
About this happening:
Microsoft patched CVE-2026-56155 in Active Directory Federation Services (AD FS) after confirming active exploitation of an elevation-of-privilege flaw that could let...
Active Directory Federation Services actively exploited elevation of privilege privilege-escalation flaw (CVE-2026-56155)
VulnerabilityAbout this happening: Microsoft patched CVE-2026-56155 in Active Directory Federation Services (AD FS) after confirming active exploitation of an elevation-of-privilege flaw that could let...
Microsoft Defender RoguePlanet race-condition zero-day remote code execution flaw
Vulnerability
H score39
First: 10.06.2026 02:11
Last: 10.06.2026 02:11
Sources 1
About this happening:
Microsoft Defender zero-day RoguePlanet is a race-condition flaw affecting fully patched Windows 10 and Windows 11 systems. A public proof-of-concept exploit was released shortly...
Microsoft Defender RoguePlanet race-condition zero-day remote code execution flaw
VulnerabilityAbout this happening: Microsoft Defender zero-day RoguePlanet is a race-condition flaw affecting fully patched Windows 10 and Windows 11 systems. A public proof-of-concept exploit was released shortly...
Latest development: 10.06.2026 08:22
The anonymous security researcher Chaotic Eclipse, also known as Nightmare-Eclipse, released a proof-of-concept (PoC) exploit for the Microsoft Defender zero-day RoguePlanet under a new GitHub account named MSNightmare. The race-condition exploit can yield a SYSTEM-level shell and arbitrary code execution when it succeeds, has been tested on Windows 11 and Windows 10 with the June 2026 Patch Tuesday updates installed, and currently does not work on Windows Server without redesign because standard users cannot mount an ISO image.
Windows Collaborative Translation Framework CTFMON improper link resolution EoP security flaw (CVE-2026-45586)
Vulnerability
H score20
First: 09.06.2026 20:57
Last: 09.06.2026 20:57
Sources 1
About this happening:
Windows Collaborative Translation Framework (CTFMON) has a local privilege-escalation vulnerability, CVE-2026-45586, that Microsoft patched in June 2026. An author...
Windows Collaborative Translation Framework CTFMON improper link resolution EoP security flaw (CVE-2026-45586)
VulnerabilityAbout this happening: Windows Collaborative Translation Framework (CTFMON) has a local privilege-escalation vulnerability, CVE-2026-45586, that Microsoft patched in June 2026. An author...
Cisco Unified CM SSRF root-privilege flaw (CVE-2026-20230)
Vulnerability
H score49
First: 04.06.2026 14:09
Last: 04.06.2026 14:09
Sources 1
About this happening:
CVE-2026-20230 exposes Cisco Unified CM systems with WebDialer enabled to remote SSRF abuse that can lead to root-level compromise. The flaw can be triggered w...
Cisco Unified CM SSRF root-privilege flaw (CVE-2026-20230)
VulnerabilityAbout this happening: CVE-2026-20230 exposes Cisco Unified CM systems with WebDialer enabled to remote SSRF abuse that can lead to root-level compromise. The flaw can be triggered w...
Latest development: 26.06.2026 22:43
Cisco released a patch for CVE-2026-20230 in Cisco Unified Communications Manager Server and warned that the critical server-side request forgery flaw could be exploited remotely and without authentication via specially crafted HTTP requests.
Timeline
-
15.04.2026 17:51 2 articles · 3mo ago
CISA adds CVE-2025-60710 to actively exploited catalog
Legal Policy Action UpdateCISA added CVE-2025-60710, a Windows Task Host link-following privilege-escalation flaw affecting Windows 11 and Windows Server 2025, to its actively exploited vulnerabilities catalog and ordered Federal Civilian Executive Branch agencies to secure their systems within two weeks under BOD 22-01. CISA also urged other defenders to apply vendor patches and mitigations because local attackers with basic user permissions could reach SYSTEM privileges and take full control of affected devices.
Show sources
- CISA flags Windows Task Host vulnerability as exploited in attacks — www.bleepingcomputer.com — 15.04.2026 17:51
- CISA flags Windows Task Host vulnerability as exploited in attacks — www.bleepingcomputer.com — 15.04.2026 17:51