Security Update News
Update Information
| Title | Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability |
|---|---|
| Update ID | MS:CVE-2025-27488 |
| Type | mscve |
| Published | 2025-05-13T07:00:00 |
| Last Updated | 2025-05-13T07:00:00 |
Security Impact
| CVSS Score | 6.7 |
|---|---|
| Severity | MEDIUM |
| Attack Vector | LOCAL |
Affected CVEs
- CVE-2025-27488
Update Details
Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.