CVE-2025-27480

—

CVSS 3.1

8.1 high

EPSS

12%p96

Published

Apr 8, 2025 (Apr 8, 2025)

Modified

Jun 17, 2026

Description

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Vendors: microsoft
Products: windows server 2012, windows server 2016, windows server 2019, windows server 2022, windows server 2022 23h2, windows server 2025
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.4%)

In the news5 stories

Microsoft fixes actively exploited Windows CLFS zero-day (CVE-2025-29824)

Help Net SecurityApr 15, 08:11 UTC · Apr 15, 2025Exploit / PoC in the wildCVE-2025-29824 CVE-2024-49138 CVE-2025-26663+7 CVEs1

60

Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability

The Hacker NewsApr 10, 06:48 UTC · Apr 10, 2025Vulnerability in the wildCVE-2025-29824 CVE-2022-24521 CVE-2022-37969+15 CVEs

60

Patch Tuesday, April 2025 Edition

Krebs on SecurityApr 9, 10:19 UTC · Apr 9, 2025Vulnerability in the wildCVE-2025-29824 CVE-2025-26663 CVE-2025-26671+2 CVEs1

60

Microsoft patches zero-day actively exploited in string of ransomware attacks

CyberScoopApr 8, 21:22 UTC · Apr 8, 2025Ransomware in the wildCVE-2025-29824 CVE-2025-29792 CVE-2025-29793+3 CVEs1

60

Microsoft Patch Tuesday for April 2025 — Snort rules and prominent vulnerabilities

Cisco TalosApr 8, 18:53 UTC · Apr 8, 2025Vulnerability in the wildCVE-2025-27480 CVE-2025-27482 CVE-2025-26663+16 CVEs

60