CVE-2025-47827

🔥 Known Exploited (CISA KEV)MEDIUM

4.6

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-06-05

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

Affected Platforms (CPE)

💻

Igel

Igel Os

< 11.01.100

💻

Microsoft

Windows 10 1507

< 10.0.10240.21161

💻

Microsoft

Windows 10 1607

< 10.0.14393.8519

💻

Microsoft

Windows 10 1809

< 10.0.17763.7919

References & Advisories

🔗 https://github.com/Zedeldi/CVE-2025-47827

🔗 https://github.com/Zedeldi/igelfs

🔗 https://github.com/Zedeldi/CVE-2025-47827

🔗 https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-47827

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47827

Vulnerability Description

Affected Platforms (CPE)

Igel Os

Windows 10 1507

Windows 10 1607

Windows 10 1809

References & Advisories

相關漏洞威脅