CVE-2025-27488

🗓️ 13 May 2025 16:58:55Reported by microsoftType

Hard-coded credentials in Windows Hardware Lab Kit permit local privilege escalation by attackers.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2025-27488	13 May 202516:27	–	circl
CNNVD	Microsoft Windows Hardware Lab Kit 信任管理问题漏洞	13 May 202500:00	–	cnnvd
Cvelist	CVE-2025-27488 Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability	13 May 202516:58	–	cvelist
EUVD	EUVD-2025-14437	3 Oct 202520:07	–	euvd
Kaspersky	KLA83567 Multiple vulnerabilities in Microsoft Windows	13 May 202500:00	–	kaspersky
Kaspersky	KLA83574 Multiple vulnerabilities in Microsoft Azure	13 May 202500:00	–	kaspersky
Microsoft CVE	Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability	13 May 202507:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft Azure	13 May 202519:10	–	ncsc
NCSC	Vulnerabilities fixed in Microsoft Windows	13 May 202519:47	–	ncsc
NVD	CVE-2025-27488	13 May 202517:15	–	nvd

NVD

Vulners

CNA

Node

microsoft windows_hardware_lab_kitRange<10.1.17763.7010

AND

microsoft windows_10_1809Match-

microsoft windows_server_2019Match-

Node

microsoft windows_hardware_lab_kitRange<10.1.19041.5609

AND

microsoft windows_10_2004Match-

microsoft windows_10_20h2Match-

microsoft windows_10_21h1Match-

microsoft windows_10_21h2Match-

microsoft windows_10_22h2Match-

Node

microsoft windows_hardware_lab_kitRange<10.1.20348.3330

AND

microsoft windows_server_2022Match-

Node

microsoft windows_hardware_lab_kitRange<10.1.22621.5040

AND

microsoft windows_11_22h2Match-

Node

microsoft windows_hardware_lab_kitRange<10.1.26100.3478

AND

microsoft windows_11_24h2Match-

microsoft windows_server_2025Match-

[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 HLK version 20H2",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.19041.5609",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 HLK version 21H1",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.19041.5609",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 HLK version 21H2",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.19041.5609",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 HLK Version 22H2",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.19041.5609",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 HLK 22H2",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.22621.5040",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 HLK 24H2",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.26100.3478",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows HLK for Windows 10 version 2004",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.19041.5609",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows HLK for Windows Server 2019",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.17763.7010",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows HLK for Windows Server 2022",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.20348.3330",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows HLK for Windows Server 2025",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.26100.3478",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows HLK, version 1809",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "10.1.17763.7010",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27488

13 Feb 2026 19:21Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.7

EPSS0.00707

SSVC

CWE-798