Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-27472

Windows Mark of the Web Security Feature Bypass Vulnerability

Description

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1507

  • 10.0.10240.0 to < 10.0.10240.20978affected

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.25423affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.25423affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.22523affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.22523affected

References