6.7
Medium
CVE-2025-27488 Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally
Description
Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows HLK for Windows Server 2025 1.0 | 1.0.0 → < 10.1.26100.3478 | 10.1.26100.3478 |
| Windows 11 HLK 24H2 1.0 | 1.0.0 → < 10.1.26100.3478 | 10.1.26100.3478 |
| Windows 10 HLK Version 1809 1.0 | 1.0.0 → < 10.1.17763.7010 | 10.1.17763.7010 |
| Windows 10 HLK version 21H1 1.0 | 1.0.0 → < 10.1.19041.5609 | 10.1.19041.5609 |
| Windows 11 HLK 22H2 1.0 | 1.0.0 → < 10.1.22621.5040 | 10.1.22621.5040 |
| Windows HLK for Windows Server 2022 1.0 | 1.0.0 → < 10.1.20348.3330 | 10.1.20348.3330 |
| Windows 10 HLK version 20H2 1.0 | 1.0.0 → < 10.1.19041.5609 | 10.1.19041.5609 |
| Windows 10 HLK Version 22H2 1.0 | 1.0.0 → < 10.1.19041.5609 | 10.1.19041.5609 |
| Windows 10 HLK version 21H2 1.0 | 1.0.0 → < 10.1.19041.5609 | 10.1.19041.5609 |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows HLK for Windows 10 version 2004 1.0 | 1.0.0 → < 10.1.19041.5609 | 10.1.19041.5609 |
| Windows HLK for Windows Server 2019 1.0 | 1.0.0 → < 10.1.17763.7010 | 10.1.17763.7010 |
| Windows HLK, version 1809 1.0 | 1.0.0 → < 10.1.17763.7010 | 10.1.17763.7010 |