CVE-2025-49738
Published: 08 July 2025
Summary
CVE-2025-49738 is a high-severity Link Following (CWE-59) vulnerability in Microsoft Pc Manager. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 19.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Microsoft PC Manager is affected by CVE-2025-49738, a link-following vulnerability (CWE-59) that stems from improper resolution of symbolic links before file access. The flaw carries a CVSS 3.1 base score of 7.8 and permits local privilege escalation when an attacker supplies a crafted link that the application follows without adequate validation.
An attacker who already possesses a local user account on the system can exploit the issue without user interaction. Successful exploitation grants the attacker the ability to read, modify, or delete arbitrary files, resulting in full control over confidentiality, integrity, and availability on the affected host.
The official advisory published by Microsoft at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49738 contains the authoritative guidance on available updates and mitigation steps. The associated EPSS score has remained flat at 0.0130 since disclosure, indicating no measurable increase in observed exploitation interest.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-20539
Vulnerability details
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.