CVE-2025-27997

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.

Score

CVSS 3.1 8.4 High

Status

Analyzed - cve@mitre.org

Published

2025-05-21

Last modified

2025-05-21

Weaknesses

CWE-427

Affected products

• Battle.net (Blizzard)

References

• https://gist.github.com/sornram9254/4593dd5eb2bcca50d68dc6ac70e40b24