What is the CVSS score of CVE-2025-27237?

CVE-2025-27237 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.0%.

Which versions of Windows are affected by CVE-2025-27237?

CVE-2025-27237 presents moderate security risk, a DLL hijacking vulnerability rated CVSS 7.3. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-27237?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Windows CVE-2025-27237

EUVD-2025-32535 HIGH

Uncontrolled Search Path Element (CWE-427)

2025-10-03 security@zabbix.com

Windows Privilege Escalation OpenSSL Debian Ubuntu

7.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 13, 2026 - 19:29 euvd

EUVD-2025-32535

Analysis Generated

Mar 13, 2026 - 19:29 vuln.today

CVE Published

Oct 03, 2025 - 12:15 nvd

HIGH 7.3

DescriptionCVE.org

In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL.

Analysis

Technical ContextAI

Privilege escalation allows a low-privileged user or process to gain elevated permissions beyond what was originally authorized. This vulnerability is classified as Uncontrolled Search Path Element (CWE-427).

RemediationAI

Apply the principle of least privilege. Keep systems patched. Monitor for suspicious privilege changes. Use mandatory access controls (SELinux, AppArmor).

More in Windows

View all

CVE-2019-0803 HIGH Act Now POC

7.8 Apr 09

Windows Win32k fails to properly handle objects in memory, allowing local privilege escalation exploited in the wild in

CVE-2020-1472 MEDIUM Act Now POC

5.5 Aug 17

A privilege escalation vulnerability (CVSS 5.5). Risk factors: actively exploited (KEV-listed), EPSS 94% exploitation pr

CVE-2025-33053 HIGH Act Now POC

8.8 Jun 10

Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables

CVE-2025-33073 HIGH Act Now POC

8.8 Jun 10

Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker

CVE-2025-13315 CRITICAL Emergency POC

9.3 Nov 19

Twonky Server 8.5.2 on Linux and Windows allows unauthenticated access to the admin log file through a web service API b

CVE-2013-10047 CRITICAL Emergency POC

9.3 Aug 01

An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote

CVE-2012-10030 CRITICAL Emergency POC

9.3 Aug 05

FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit

CVE-2025-34101 CRITICAL Emergency POC

9.3 Jul 10

Serviio Media Server versions 1.4 through 1.8 on Windows contain an unauthenticated command injection in the /rest/actio

CVE-2025-13316 HIGH Act Now POC

8.2 Nov 19

Twonky Server 8.5.2 uses hard-coded cryptographic keys for encrypting the administrator password. Combined with the cred

CVE-2025-34095 CRITICAL Emergency POC

9.3 Jul 10

Mako Server versions 2.5 and 2.6 contain an unauthenticated OS command injection via the tutorial interface at examples/

CVE-2025-11953 CRITICAL Act Now POC

9.8 Nov 03

React Native Metro Development Server binds to external interfaces by default and contains an OS command injection endpo

CVE-2025-24054 MEDIUM This Month POC

6.5 Mar 11

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network

Same weakness CWE-427 – Uncontrolled Search Path Element

View all

CVE-2020-3153 MEDIUM POC

6.5

CVE-2020-3433 HIGH POC

7.8

CVE-2017-6517 CRITICAL POC

9.8

CVE-2020-27955 CRITICAL POC

9.8

CVE-2024-48990 HIGH POC

7.8

CVE-2022-2334 HIGH POC

7.2

CVE-2024-23054 CRITICAL POC

9.8

CVE-2023-31543 CRITICAL POC

9.8

Same technique Privilege Escalation

View all

CVE-2024-0012 CRITICAL POC

9.3

CVE-2025-47812 CRITICAL POC

10.0

CVE-2013-0422 CRITICAL POC

9.8

CVE-2013-0632 CRITICAL POC

9.8

CVE-2024-9474 MEDIUM POC

6.9

CVE-2017-5689 CRITICAL POC

9.8

CVE-2021-20021 CRITICAL POC

9.8

CVE-2017-12635 CRITICAL POC

9.8

Vendor StatusVendor

Ubuntu

Priority: Medium

zabbix

Release	Status	Version
trusty	not-affected	-
xenial	not-affected	-
bionic	not-affected	-
focal	not-affected	-
jammy	not-affected	-
noble	DNE	-
plucky	not-affected	-
upstream	not-affected	debian: Only affects Zabbix Agent and Agent2 on Windows

Debian

zabbix

Release	Status	Fixed Version	Urgency
bullseye	fixed	1:5.0.8+dfsg-1	-
bullseye (security)	fixed	1:5.0.47+dfsg-0+deb11u1	-
bookworm	fixed	1:6.0.14+dfsg-1	-
trixie	fixed	1:7.0.10+dfsg-2	-
forky, sid	fixed	1:7.0.22+dfsg-1	-
(unstable)	not-affected	-	-

CVE-2025-27237 vulnerability details – vuln.today

Back

Windows CVE-2025-27237

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More in Windows

Same weakness CWE-427 – Uncontrolled Search Path Element

Same technique Privilege Escalation

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code