MEDIUM 6.7 Microsoft

CVE-2025-27488

Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability

Microsoft Security Update 2025-May: Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability

Affected Products

Windows HLK for Windows Server 2025
Windows 11 HLK 24H2
Windows HLK, version 1809
Windows 10 HLK version 21H1
Windows 11 HLK 22H2
Windows HLK for Windows Server 2022
Windows 10 HLK version 20H2
Windows 10 HLK Version 22H2

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27488
https://nvd.nist.gov/vuln/detail/CVE-2025-27488

Published: 2025-05-13 · Source: Microsoft · Feed updated: 2026-08-04

This medium severity vulnerability with a CVSS score of 6.7 was published on 2025-05-13 via Microsoft. Affected: Windows HLK for Windows Server 2025, Windows 11 HLK 24H2, Windows HLK, version 1809 and 5 more.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.