CVE-2025-27735CWE-345

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

Medium · published April 8, 2025

CVSS v3.1
6.0
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00403 · 33.4th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2025-04-08T17:24Z
EPSS history
Timeline
  • 08 APR 17:24Z
    Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
    cvelistv5