SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2025-27464

CRITICAL · CVSS 9.4 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-09 · Last synced 2026-08-08

CyberRota Analysis

AI-Generated

The vulnerability affects Windows PV drivers, which expose certain facilities to userspace without proper security descriptors, allowing unprivileged users full access. This could lead to unauthorized actions or data exposure within the system. Organizations utilizing Windows environments, particularly those relying on virtualization technologies, should prioritize addressing this issue to mitigate potential risks.

CVE
CVE-2025-27464
Severity
CRITICAL
CVSS
9.4
EPSS
0.16%
Windows

Original NVD Description

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. These are: 1. XenCons, CVE-2025-27462 2. XenIface, CVE-2025-27463 3. XenBus, CVE-2025-27464