7.8
High
CVE-2025-27743 Untrusted search path in System Center allows an authorized attacker to elevate privileges locally
Description
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| System Center Virtual Machine Manager 2022 | Versions not published | |
| System Center Virtual Machine Manager 2019 | Versions not published | |
| System Center Virtual Machine Manager 2025 | Versions not published | |
| System Center Data Protection Manager 2025 | Versions not published | |
| System Center Data Protection Manager 2022 | Versions not published | |
| System Center Data Protection Manager 2019 | Versions not published | |
| System Center Orchestrator 2019 | Versions not published | |
| System Center Orchestrator 2022 | Versions not published | |
| System Center Orchestrator 2025 | Versions not published |
Show the 6 other branches Hide the 6 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| System Center Service Manager 2019 | Versions not published | |
| System Center Service Manager 2022 | Versions not published | |
| System Center Service Manager 2025 | Versions not published | |
| System Center Operations Manager 2019 | Versions not published | |
| System Center Operations Manager 2022 | Versions not published | |
| System Center Operations Manager 2025 | Versions not published |
References
- Microsoft System Center Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified