CVE-2025-27736

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Apr 8, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-277378.6Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.CVE-2025-277386.5Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.CVE-2025-277397.8Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2025-277408.8Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.CVE-2025-277417.8Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.CVE-2025-277425.5Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.CVE-2025-277437.8Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.CVE-2025-277447.8Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.CVE-2025-277457.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-277467.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-277477.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-277487.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27736: Medium severity, CVSS 5.5 | Vulnix