What is CVE-2025-27743?

CVE-2025-27743 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft System Center Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2025-27743 cover?

CVE-2025-27743 covers the following CVE IDs: CVE-2025-27743. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2025-27743?

CVE-2025-27743 has a CVSS v3 base score of 7.8, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2025-27743?

CVE-2025-27743 affects 15 products, including: System Center Data Protection Manager 2019; System Center Data Protection Manager 2022; System Center Data Protection Manager 2025; System Center Operations Manager 2019; System Center Operations Manager 2022; and others — see the full list on the advisory page.

CVE-2025-27743HighCVSS 7.8

Microsoft System Center Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

April 8, 2025

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-27743 →

📋 Description

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

🎯 Affected products15

System Center Data Protection Manager 2019
System Center Data Protection Manager 2022
System Center Data Protection Manager 2025
System Center Operations Manager 2019
System Center Operations Manager 2022
System Center Operations Manager 2025
System Center Orchestrator 2019
System Center Orchestrator 2022
System Center Orchestrator 2025
System Center Service Manager 2019
System Center Service Manager 2022
System Center Service Manager 2025
System Center Virtual Machine Manager 2019
System Center Virtual Machine Manager 2022
System Center Virtual Machine Manager 2025

🔗 References (1)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27743