CVE-2025-27488
mediumpriority · track · 0OT risk · elevatedEPSS 0.004 · 33 %ileDEEUNLRUUSEPSS · scored 2026-10-23
Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedWindows 10 HLK Version 22H2msrc_csaf
10.1.19041.5609:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows 10 HLK version 20H2msrc_csaf
10.1.19041.5609:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows 10 HLK version 21H1msrc_csaf
10.1.19041.5609:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows 10 HLK version 21H2msrc_csaf
10.1.19041.5609:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows 11 HLK 22H2msrc_csaf
10.1.22621.5040:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows 11 HLK 24H2msrc_csaf
10.1.26100.3478:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows HLK for Windows 10 version 2004msrc_csaf
10.1.19041.5609:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows HLK for Windows Server 2019msrc_csaf
10.1.17763.7010:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows HLK for Windows Server 2022msrc_csaf
10.1.20348.3330:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows HLK for Windows Server 2025msrc_csaf
10.1.26100.3478:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases - FixedWindows HLK, version 1809msrc_csaf
10.1.17763.7010:Security Update:https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
https://learn.microsoft.com/en-us/windows-hardware/test/hlk/what-s-new-in-the-hardware-lab-kit#whats-new-in-previous-releases
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (135)
Products and version ranges known to be affected.
- Microsoft Windows 10 HLK Version 22H2all versionscert_bundDEcpe:/o:microsoft:windows_10:hlk_version_22h2
- Microsoft Windows 10 HLK version 20H2all versionscert_bundDEcpe:/o:microsoft:windows_10:hlk_version_20h2
- Microsoft Windows 10 HLK version 21H1all versionscert_bundDEcpe:/o:microsoft:windows_10:hlk_version_21h1
- Microsoft Windows 10 HLK version 21H2all versionscert_bundDEcpe:/o:microsoft:windows_10:hlk_version_21h2
- Microsoft Windows 10 Windows HLK for version 2004all versionscert_bundDEcpe:/o:microsoft:windows_10:windows_hlk_for_version_2004
- Microsoft Windows 11 Windows Terminalall versionscert_bundDEcpe:/o:microsoft:windows_11:windows_terminal
- Microsoft Windows App Client for Desktopall versionscert_bundDEcpe:/o:microsoft:windows:app_client_for_desktop
- Microsoft Windows Remote Desktop Clientall versionscert_bundDEcpe:/o:microsoft:windows:remote_desktop_client_for_desktop
- Microsoft Windows Server 2008 R2 SP1all versionscert_bundDEcpe:/o:microsoft:windows_server:2008_r2_sp1
advisories (5)
Vendor and ecosystem advisories describing this.
- NCSC-2025-0156Kwetsbaarheden verholpen in Microsoft AzureNL2025-05-13csaf · ncsc_nlNL
Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.
- NCSC-2025-0159Kwetsbaarheden verholpen in Microsoft WindowsNL2025-05-13csaf · ncsc_nlNL
Microsoft heeft kwetsbaarheden verholpen in Windows.
- WID-SEC-W-2025-1014Microsoft Azure: Mehrere SchwachstellenDeutsch2025-05-13csaf · cert_bundDE
Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Azure Komponenten und Apps ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen oder Daten zu manipuleren.
- WID-SEC-W-2025-1050Microsoft Windows Server: Mehrere Schwachstellen ermöglichen PrivilegieneskalationDeutsch2025-05-13csaf · cert_bundDE
Ein entfernter, anonymer Angreifer, oder lokaler Angreifer, oder ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows 10, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows, Microsoft Windows Server 2022 und Microsoft Windows 11 ausnutzen, um einen Denial-of-Service auszulösen, Informationen offenzulegen, beliebigen Programmcode auszuführen oder seine Privilegien zu erweitern.
- msrc_CVE-2025-27488Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability2025-05-13csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (3)
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan