Vulners
Lucene search
CVE-2025-27480
🗓️ 08 Apr 2025 17:23:58Reported by microsoftType 
cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 178 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 39 |
|---|---|---|---|---|
 | Exploit for Use After Free in Microsoft | 3 Sep 202503:31 | – | githubexploit |
| Exploit for Use After Free in Microsoft | 1 Sep 202510:49 | – | githubexploit |
 | April Microsoft Patch Tuesday | 10 Apr 202522:59 | – | avleonov |
 | The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to execute arbitrary code. | 9 Apr 202500:00 | – | bdu_fstec |
 | CVE-2025-27480 | 8 Apr 202516:14 | – | circl |
 | Microsoft Windows Remote Desktop Gateway（RD Gateway） 资源管理错误漏洞 | 8 Apr 202500:00 | – | cnnvd |
 | CVE-2025-27480 Windows Remote Desktop Services Remote Code Execution Vulnerability | 8 Apr 202517:23 | – | cvelist |
 | EUVD-2025-10183 | 3 Oct 202520:07 | – | euvd |
 | April 8, 2025—KB5055519 (OS Build 17763.7136) - EXPIRED | 8 Apr 202507:00 | – | mskb |
| April 8, 2025—KB5055521 (OS Build 14393.7969) | 8 Apr 202507:00 | – | mskb |
10
Node
OROROROROROR
[
{
"vendor": "Microsoft",
"product": "Windows Server 2012",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.2.9200.0",
"lessThan": "6.2.9200.25423",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.2.9200.0",
"lessThan": "6.2.9200.25423",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 R2",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.3.9600.0",
"lessThan": "6.3.9600.22523",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 R2 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.3.9600.0",
"lessThan": "6.3.9600.22523",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2016",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.14393.0",
"lessThan": "10.0.14393.7969",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2016 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.14393.0",
"lessThan": "10.0.14393.7969",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2019",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.17763.0",
"lessThan": "10.0.17763.7136",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2019 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.17763.0",
"lessThan": "10.0.17763.7136",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2022",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.20348.0",
"lessThan": "10.0.20348.3453",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.25398.0",
"lessThan": "10.0.25398.1551",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2025",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.3775",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2025 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.3775",
"versionType": "custom",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| GET line length | path | /foo | Stack buffer overflow in BarServer caused by long HTTP GET request overflowing 256-byte buffer, enabling remote code execution. | CWE-416 |
| HTTP request line length | path | /foo | Stack buffer overflow in BarServer caused by long HTTP GET request overflowing 256-byte buffer, enabling remote code execution. | CWE-416 |
| GET line length | path | /tmp/revshell | Exploitation path using crafted GET request to overflow stack and inject shellcode for reverse shell access. | CWE-416 |
| overflow payload placement (NOP sled + shellcode) | path | /tmp/revshell | Exploitation path using crafted GET request to overflow stack and inject shellcode for reverse shell access. | CWE-416 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 09:03Current
8High risk
Vulners AI Score8
CVSS 3.18.1
EPSS0.0705
SSVC