What is the severity of CVE-2025-27483?

CVE-2025-27483 has a high severity level as it allows unauthorized attackers to elevate privileges locally.

How do I fix CVE-2025-27483?

To fix CVE-2025-27483, apply the latest security patches provided by Microsoft for affected Windows versions.

Which Windows versions are affected by CVE-2025-27483?

CVE-2025-27483 affects various versions of Windows including Windows 10 and Windows Server products.

Can CVE-2025-27483 be exploited remotely?

No, CVE-2025-27483 requires local access to the system for exploitation.

What types of attacks could CVE-2025-27483 enable?

CVE-2025-27483 could enable attackers to gain elevated privileges, potentially leading to unauthorized access to sensitive information.

Vulnerability/
CVE-2025-27483

high

7.8

CWE

125

8/4/2025

16/4/2025

CVE-2025-27483: NTFS Elevation of Privilege Vulnerability

First published: Tue Apr 08 2025(Updated: )

<p>Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.</p>

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows Server 2016		fix available externally
Windows 10	=1809	fix available externally
Microsoft Windows Server 2016		fix available externally
Microsoft Windows Server 2019		fix available externally
Windows 10	=1607	fix available externally
Windows 10	=1809	fix available externally
Microsoft Windows Server 2012 R2		fix available externally
Microsoft Windows Server 2019		fix available externally
Windows 10	=1607	fix available externally
Microsoft Windows Server 2012 R2		fix available externally
Windows 10		fix available externally
Windows 10		fix available externally

Never miss a vulnerability like this again

Reference Links

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27483 (Advisory)

Frequently Asked Questions

What is the severity of CVE-2025-27483?
CVE-2025-27483 has a high severity level as it allows unauthorized attackers to elevate privileges locally.
How do I fix CVE-2025-27483?
To fix CVE-2025-27483, apply the latest security patches provided by Microsoft for affected Windows versions.
Which Windows versions are affected by CVE-2025-27483?
CVE-2025-27483 affects various versions of Windows including Windows 10 and Windows Server products.
Can CVE-2025-27483 be exploited remotely?
No, CVE-2025-27483 requires local access to the system for exploitation.
What types of attacks could CVE-2025-27483 enable?
CVE-2025-27483 could enable attackers to gain elevated privileges, potentially leading to unauthorized access to sensitive information.

collector/mitre-cve
source/MITRE
collector/msrc-cve
source/Microsoft
agent/title
agent/references
agent/type
agent/software-canonical-lookup
agent/first-publish-date
collector/msrc
agent/softwarecombine
collector/nvd-api
source/NVD
agent/author
agent/weakness
agent/last-modified-date
agent/severity
agent/source
agent/description
agent/tags
agent/event
vendor/microsoft
canonical/microsoft windows server 2016
canonical/windows 10
version/windows 10/1809
canonical/microsoft windows server 2019
version/windows 10/1607
canonical/microsoft windows server 2012 r2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.