{"id":"CVE-2025-27472","published":"2025-04-08T17:23:16Z","modified":"2026-08-10T15:12:12Z","title":"Windows Mark of the Web Security Feature Bypass Vulnerability","vendor":"Microsoft","product":"Windows 10 Version 1507","tier":"tail","description":{"text":"Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.","provenance":"source","from":"CVE.org"},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01505,"percentile":0.74262,"provenance":"source"},"cwes":[{"id":"CWE-693","name":"Protection Mechanism Failure"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27472","tags":["vendor-advisory","patch"]}],"priority":{"score":18.6,"factors":[{"name":"EPSS percentile","points":14.85},{"name":"CVSS severity","points":3.78}]},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft","product":"Windows 10 Version 1507","versions":[">= 10.0.10240.0, < 10.0.10240.20978"]},{"vendor":"Microsoft","product":"Windows Server 2012","versions":[">= 6.2.9200.0, < 6.2.9200.25423"]},{"vendor":"Microsoft","product":"Windows Server 2012 (Server Core installation)","versions":[">= 6.2.9200.0, < 6.2.9200.25423"]},{"vendor":"Microsoft","product":"Windows Server 2012 R2","versions":[">= 6.3.9600.0, < 6.3.9600.22523"]},{"vendor":"Microsoft","product":"Windows Server 2012 R2 (Server Core installation)","versions":[">= 6.3.9600.0, < 6.3.9600.22523"]}],"euvd":{"id":"EUVD-2025-10181","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-microsoft-windows-cwe-693"}}