{"id":"CVE-2025-27488","state":"PUBLISHED","title":"Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability","description":"Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.","publishedAt":"2025-05-13T16:58:55.126Z","updatedAt":"2026-02-13T19:21:16.843Z","severity":{"score":6.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Windows 10 HLK version 20H2","Microsoft Windows 10 HLK version 21H1","Microsoft Windows 10 HLK version 21H2","Microsoft Windows 10 HLK Version 22H2","Microsoft Windows 11 HLK 22H2","Microsoft Windows 11 HLK 24H2","Microsoft Windows HLK for Windows 10 version 2004","Microsoft Windows HLK for Windows Server 2019","Microsoft Windows HLK for Windows Server 2022","Microsoft Windows HLK for Windows Server 2025","Microsoft Windows HLK, version 1809"],"affected":[{"vendor":"Microsoft","product":"Windows 10 HLK version 20H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 10 HLK version 21H1","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 10 HLK version 21H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 10 HLK Version 22H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 11 HLK 22H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.22621.5040","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 11 HLK 24H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.26100.3478","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK for Windows 10 version 2004","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK for Windows Server 2019","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.17763.7010","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK for Windows Server 2022","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.20348.3330","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK for Windows Server 2025","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.26100.3478","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK, version 1809","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.17763.7010","versionType":"custom"}]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27488"],"weaknesses":["CWE-798"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/27xxx/CVE-2025-27488.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-27488","state":"PUBLISHED","datePublished":"2025-05-13T16:58:55.126Z","dateUpdated":"2026-02-13T19:21:16.843Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2025-02-26T14:42:05.978Z"},"containers":{"cna":{"title":"Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability","descriptions":[{"lang":"en-US","value":"Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally."}],"affected":[{"vendor":"Microsoft","product":"Windows 10 HLK version 20H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 10 HLK version 21H1","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 10 HLK version 21H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 10 HLK Version 22H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 11 HLK 22H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.22621.5040","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows 11 HLK 24H2","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.26100.3478","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK for Windows 10 version 2004","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.19041.5609","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK for Windows Server 2019","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.17763.7010","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK for Windows Server 2022","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.20348.3330","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK for Windows Server 2025","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.26100.3478","versionType":"custom"}]},{"vendor":"Microsoft","product":"Windows HLK, version 1809","versions":[{"version":"1.0.0","status":"affected","lessThan":"10.1.17763.7010","versionType":"custom"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27488","name":"Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"MEDIUM","baseScore":6.7,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-798","description":"CWE-798: Use of Hard-coded Credentials","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-02-13T19:21:16.843Z"},"datePublic":"2025-05-13T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_hlk_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.26100.3478"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_hlk_24H2:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.26100.3478"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_hlk_1809:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.17763.7010"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_hlk_21H1:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.19041.5609"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_hlk_22H2:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.22621.5040"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_hlk_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.20348.3330"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_hlk_20H2:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.19041.5609"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_hlk_22H2:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.19041.5609"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_hlk_21H2:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.19041.5609"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_hlk_2004:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.19041.5609"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_hlk_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"10.1.17763.7010"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-13T18:13:48.880230Z","id":"CVE-2025-27488","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-13T18:13:57.657Z"}}]}}}