Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-27488

Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 HLK version 20H2

  • 1.0.0 to < 10.1.19041.5609affected

Microsoft Windows 10 HLK version 21H1

  • 1.0.0 to < 10.1.19041.5609affected

Microsoft Windows 10 HLK version 21H2

  • 1.0.0 to < 10.1.19041.5609affected

Microsoft Windows 10 HLK Version 22H2

  • 1.0.0 to < 10.1.19041.5609affected

Microsoft Windows 11 HLK 22H2

  • 1.0.0 to < 10.1.22621.5040affected

Microsoft Windows 11 HLK 24H2

  • 1.0.0 to < 10.1.26100.3478affected

Microsoft Windows HLK for Windows 10 version 2004

  • 1.0.0 to < 10.1.19041.5609affected

Microsoft Windows HLK for Windows Server 2019

  • 1.0.0 to < 10.1.17763.7010affected

Microsoft Windows HLK for Windows Server 2022

  • 1.0.0 to < 10.1.20348.3330affected

Microsoft Windows HLK for Windows Server 2025

  • 1.0.0 to < 10.1.26100.3478affected

Microsoft Windows HLK, version 1809

  • 1.0.0 to < 10.1.17763.7010affected

References