CVE-2025-27488
Published May 13, 2025Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor/product archive
90 CVEs tagged to microsoft / windows_10_21h1 — 2 Critical, 65 High, 23 Medium, 0 Low, 0 Unrated.
Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.
Microsoft AllJoyn API Information Disclosure Vulnerability
Windows Kernel-Mode Driver Information Disclosure Vulnerability
Windows Authentication Information Disclosure Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
PowerShell Elevation of Privilege Vulnerability
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the a…
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Local Session Manager (LSM) Denial of Service Vulnerability
Windows TCP/IP Denial of Service Vulnerability
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
Remote Procedure Call Information Disclosure Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
Windows upnphost.dll Denial of Service Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Windows Kernel Information Disclosure Vulnerability
Windows Deployment Services Information Disclosure Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability