Windows Graphics Component Elevation of Privilege Security Flaw in Microsoft
CVE-2025-27732
7HIGH
Key Information:
- Vendor
- Microsoft
- Status
- Vendor
- CVE Published:
- 8 April 2025
Summary
This security flaw within the Windows Win32K component allows an authorized attacker to exploit improper memory locking, leading to potential unauthorized local privilege escalation. By taking advantage of this vulnerability, attackers could gain access to sensitive information or perform unauthorized actions, negatively impacting system security and user data protection.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.20978
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.7969
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7136
References
CVSS V3.1
Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved