Skip to content
VulniPulse
Sign in
High7.8Microsoft Server

High [CVE-2025-27743] Microsoft System Center Elevation of Privilege Vulnerability

This high-severity Microsoft Server advisory covers CVE-2025-27743 affecting System Center Data Protection Manager 2019, System Center Data Protection Manager 2022, System Center Data Protection Manager 2025.

CVE-2025-27743 Published Apr 8, 2025Updated by vendor Aug 10, 2026
CVE-2025-27743
Affected products & platforms
Microsoft ServerUnclassified
Open vendor advisory

Android app · Google Play

Monitor future Microsoft Server CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

Affected products named by the advisory: System Center Data Protection Manager 2019; System Center Data Protection Manager 2022; System Center Data Protection Manager 2025; System Center Operations Manager 2019; and 11 more.

Affected products named by the advisory: System Center Operations Manager 2022; System Center Operations Manager 2025; System Center Orchestrator 2019; System Center Orchestrator 2022; and 7 more.

Affected versions
  • System Center Data Protection Manager 2019 -
  • System Center Data Protection Manager 2022 -
  • System Center Data Protection Manager 2025 -
  • System Center Operations Manager 2019 -
  • System Center Operations Manager 2022 -
  • System Center Operations Manager 2025 -
  • System Center Orchestrator 2019 -
  • System Center Orchestrator 2022 -
  • System Center Orchestrator 2025 -
  • System Center Service Manager 2019 -
  • System Center Service Manager 2022 -
  • System Center Service Manager 2025 -

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation

The source record does not include mitigation steps. That is not a statement that no fix exists — read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.