CVE-2025-27491

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Apr 8, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-274927.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized aCVE-2025-274936.7A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < VCVE-2025-274947.2A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < VCVE-2025-274959.8A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injCVE-2025-274963.3Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver CVE-2025-274978.7OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service (DoS) vulnerability that causes the servCVE-2025-274985.7aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertexCVE-2025-274996.1WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerabCVE-2025-27508.8A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSCVE-2025-275006.1OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint(/api/upload) on the admin panel caCVE-2025-275018.6OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin panel can be accessedCVE-2025-275055.3GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API securi
CVE-2025-27491: High severity, CVSS 7.1 | Vulnix