7.8
High
CVE-2025-27489 Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally
Description
Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Stack OS HCI 10.0 | earliest → < 10.0.20348.3328 | 10.0.20348.3328 |
| Azure Stack HCI OS 10.0 | 10.0.25398.0 → < 10.0.25398.1486 | 10.0.25398.1486 |