CVE-2025-27717

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-277188.8Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process of the USB storage fi CVE-2025-277195.3Unauthenticated attackers can query an API endpoint and get device details.CVE-2025-27726.5BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulnerability allows netwo CVE-2025-277207.4The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials.CVE-2025-277217.5Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthorized access to system CVE-2025-277225.9Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack CVE-2025-277236.8Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a den CVE-2025-277249.8A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted CVE-2025-277254.4Time-of-check time-of-use race condition for some ACAT before version 3.13 within Ring 3: User Applications may allow a denial of service. U CVE-2025-277262.1Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file download process of the USB storage CVE-2025-277277.8Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges loca CVE-2025-277287.8Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.