CVE-2025-27463 PUBLISHED

WinPVDrivers: Excessive permissions on user-exposed devices

Assigner: XEN
Reserved: 26.02.2025 Published: 09.07.2026 Updated: 09.07.2026

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. These are: 1. XenCons, CVE-2025-27462 2. XenIface, CVE-2025-27463 3. XenBus, CVE-2025-27464

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS Score: 9.4

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Local	Confidentiality	High	Confidentiality	High
Attack Complexity	Low	Integrity	High	Integrity	High
Attack Requirements	None	Availability	High	Availability	High
Privileges Required	None
User Interaction	None

CVSS 4.0

Product Status

Vendor	Xen
Product	Windows PV drivers
Versions	Default: unaffected Version all is affected

Credits

This issue was discovered by Tu Dinh of Vates finder

References

https://xenbits.xen.org/xsa/advisory-468.html

Problem Types

CWE-276 Incorrect default permissions CWE

Impacts

CAPEC-233 Privilege Escalation