CVE-2025-27488

Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability

MEDIUM

6.7

CVSS Score

Published: May 13, 2025 at 04:58 PM UTC

Updated: June 17, 2026 at 09:03 AM UTC

12 products affected across 1 vendorWindows Hardware Lab KitWindows Server 2019Windows 10 1809

Using Windows HLK for Windows Server 2025 by Microsoft?

Get instant alerts when new vulnerabilities affect Windows HLK for Windows Server 2025 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Windows Hardware Lab Kit · Microsoft

95%

v < 10.1.17763.7010v < 10.1.19041.5609v < 10.1.20348.3330v < 10.1.22621.5040v < 10.1.26100.34781.0.0 ≤ v < 10.1.17763.70101.0.0 ≤ v < 10.1.19041.56091.0.0 ≤ v < 10.1.20348.33301.0.0 ≤ v < 10.1.22621.50401.0.0 ≤ v < 10.1.26100.34781.0.0

Affected range stops below 10.1.17763.7010, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.1.19041.5609, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.1.20348.3330, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.1.22621.5040, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.1.26100.3478, so it looks safe — our inference, not a vendor statement

microsoft-windows-10-1809 (environment) · microsoft-windows-10-2004 (environment) · microsoft-windows-10-20h2 (environment) · microsoft-windows-10-21h1 (environment) · microsoft-windows-10-21h2 (environment) · microsoft-windows-10-22h2 (environment) · microsoft-windows-11-22h2 (environment) · microsoft-windows-11-24h2 (environment) · microsoft-windows-server-2019 (environment) · microsoft-windows-server-2022 (environment) · microsoft-windows-server-2025 (environment)

Windows 10 1809 · Microsoftdevice

80%

All versions

Windows 10 2004 · Microsoftdevice

80%

All versions

Windows 10 20H2 · Microsoftdevice

80%

All versions

Windows 10 21H1 · Microsoftdevice

80%

All versions