← Database

CVE-2025-27488

MEDIUM CVSS: 6.7 Published: 2025-05-13 Modified: 2026-06-17

Description

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.

Affected Platforms

Microsoft Windows 10 21H2Microsoft Windows 11 24H2Microsoft Windows Server 2019Microsoft Windows 10 22H2Microsoft Windows Hardware Lab KitMicrosoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows 10 20H2Microsoft Windows Server 2025Microsoft Windows 10 2004

Weakness Type

CWE-798

References