CVE-2025-27484

HIGH Year: 2025
CVSS v3 Score
7.5
High
Weakness Type
CWE-591
View all →

Vulnerability Description

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.

Related Vulnerabilities

CVE-2023-28238

HIGH
CVSS:7.5(High)

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CWE-5912023

CVE-2023-33163

HIGH
CVSS:7.5(High)

Windows Network Load Balancing Remote Code Execution Vulnerability

CWE-5912023

CVE-2023-35309

HIGH
CVSS:7.5(High)

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CWE-5912023

CVE-2024-38262

HIGH
CVSS:7.5(High)

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CWE-5912024

CVE-2024-38263

HIGH
CVSS:7.5(High)

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CWE-5912024

CVE-2025-26686

HIGH
CVSS:7.5(High)

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CWE-5912025