CVE-2025-27472
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Windows Mark of the Web Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Windows 10 Version 1507
- Vendor
- Microsoft
- Product
- Windows 10 Version 1507
- Platforms
- 32-bit Systems
- x64-based Systems
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 10.0.10240.0 | affected | custom | 10.0.10240.20978 | Unavailable | None listed |
Windows Server 2012
- Vendor
- Microsoft
- Product
- Windows Server 2012
- Platforms
- x64-based Systems
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.2.9200.0 | affected | custom | 6.2.9200.25423 | Unavailable | None listed |
Windows Server 2012 (Server Core installation)
- Vendor
- Microsoft
- Product
- Windows Server 2012 (Server Core installation)
- Platforms
- x64-based Systems
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.2.9200.0 | affected | custom | 6.2.9200.25423 | Unavailable | None listed |
Windows Server 2012 R2
- Vendor
- Microsoft
- Product
- Windows Server 2012 R2
- Platforms
- x64-based Systems
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.3.9600.0 | affected | custom | 6.3.9600.22523 | Unavailable | None listed |
Windows Server 2012 R2 (Server Core installation)
- Vendor
- Microsoft
- Product
- Windows Server 2012 R2 (Server Core installation)
- Platforms
- x64-based Systems
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.3.9600.0 | affected | custom | 6.3.9600.22523 | Unavailable | None listed |