What is the CVSS score of CVE-2025-27582?

CVE-2025-27582 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Windows are affected by CVE-2025-27582?

One Identity Password Manager contains a privilege escalation vulnerability (CVE-2025-27582, CVSS 7.6) that allows attackers to gain elevated system access.. A patch is available.

How to fix or mitigate CVE-2025-27582?

Within 24 hours: Identify all One Identity Password Manager instances in your environment and their current versions. Within 7 days: Apply vendor-released patch to all instances following change management procedures; test in non-production first. Within 30 days: Verify patch deployment across 100% of instances and conduct post-patch security validation.

Windows CVE-2025-27582

EUVD-2025-21342 HIGH

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2025-07-14 cve@mitre.org

Windows Privilege Escalation Microsoft

7.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.6 HIGH

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:26 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

5.14.4

EUVD ID Assigned

Mar 16, 2026 - 09:43 euvd

EUVD-2025-21342

Analysis Generated

Mar 16, 2026 - 09:43 vuln.today

CVE Published

Jul 14, 2025 - 13:15 nvd

HIGH 7.6

DescriptionCVE.org

The Secure Password extension in One Identity Password Manager before 5.14.4 allows local privilege escalation. The issue arises from a flawed security hardening mechanism within the kiosk browser used to display the Password Self-Service site to end users. Specifically, the application attempts to restrict privileged actions by overriding the native window.print() function. However, this protection can be bypassed by an attacker who accesses the Password Self-Service site from the lock screen and navigates to an attacker-controlled webpage via the Help function. By hosting a crafted web page with JavaScript, the attacker can restore and invoke the window.print() function, launching a SYSTEM-privileged print dialog. From this dialog, the attacker can exploit standard Windows functionality - such as the Print to PDF or Add Printer wizard - to spawn a command prompt with SYSTEM privileges. Successful exploitation allows a local attacker (with access to a locked workstation) to gain SYSTEM-level privileges, granting full control over the affected device.