Out-of-Bounds Read in Windows Kernel-Mode Drivers by Microsoft
CVE-2025-27728
7.8HIGH
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 8 April 2025
What is CVE-2025-27728?
An out-of-bounds read vulnerability in Windows Kernel-Mode Drivers can be exploited by an authorized attacker to gain elevated privileges locally. This could potentially allow the attacker to execute arbitrary code with higher permissions than intended, leading to unauthorized access and manipulation of the system. It is crucial for users and administrators to stay informed about this vulnerability and apply relevant security updates to mitigate risks.
Affected Version(s)
Windows 11 Version 24H2 ARM64-based Systems 10.0.26100.0 < 10.0.26100.3775
Windows Server 2025 (Server Core installation) x64-based Systems 10.0.26100.0 < 10.0.26100.3775
Windows Server 2025 x64-based Systems 10.0.26100.0 < 10.0.26100.3775