Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could an attacker gain?
An authenticated attacker could elevate privileges to Secure Kernel.
How could an attacker exploit this vulnerability?
To exploit this vulnerability, an attacker would first have to log on to the system. The attacker could then run a specially crafted application to overwrite the page table data meant for the kernel.
Security updates
10.0.17763.7136 — https://support.microsoft.com/help/5055519
10.0.20348.3453 — https://support.microsoft.com/help/5055526
10.0.19044.5737 — https://support.microsoft.com/help/5055518
10.0.22621.5189 — https://support.microsoft.com/help/5055528
10.0.26100.3775 — https://support.microsoft.com/help/5055523
10.0.25398.1551 — https://support.microsoft.com/help/5055527
Vulnerabilities 1
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published.
References
-
CVE-2025-27739 Windows Kernel Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27739
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss