PT-2025-23024

CVE-2025-27462

·

Published

2025-05-27

·

Updated

2026-07-09

Description by

CVSS 4.0
9.4
Critical
MetricsAV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Critical vulnerabilities in XenServer Windows VM Tools enable privilege escalation on XenServer 8.4 & Citrix Hypervisor 8.2 CU1 LTSR. Linux VMs unaffected. Update to version 9.4.1+ ASAP. 🔒 #CVE-2025-27462 #Australia #Virtualization https://t.co/JaZh2Ea25r
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-276: Incorrect Default Permissions
Related identifiers
CVE-2025-27462
MGASA-2025-0270
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com