VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 8, 2025· Updated Feb 13, 2026

Microsoft System Center Elevation of Privilege Vulnerability

CVE-2025-27743

Description

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

Affected products

15
  • Microsoft/System Center Data Protection Manager 2019v5
    Range: -
  • Microsoft/System Center Data Protection Manager 2022v5
    Range: -
  • Microsoft/System Center Data Protection Manager 2025v5
    Range: -
  • Microsoft/System Center Operations Managercpe-rescue3 versions
    -+ 2 more
    • (no CPE)range: -
    • (no CPE)range: -
    • (no CPE)range: -
  • Microsoft/System Center Orchestrator 2019v5
    Range: -
  • Microsoft/System Center Orchestrator 2022v5
    Range: -
  • Microsoft/System Center Orchestrator 2025v5
    Range: -
  • Microsoft/System Center Service Manager 2019v5
    Range: -
  • Microsoft/System Center Service Manager 2022v5
    Range: -
  • Microsoft/System Center Service Manager 2025v5
    Range: -
  • Microsoft/System Center Virtual Machine Managercpe-rescue3 versions
    -+ 2 more
    • (no CPE)range: -
    • (no CPE)range: -
    • (no CPE)range: -

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.