Microsoft update

KB5055515

IE Cumulative

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.000
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.000
Windows Server 2008 for 32-bit Systems Service Pack 2 1.000
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.000
Windows Server 2008 for x64-based Systems Service Pack 2 1.000
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1.000
Windows Server 2012 1.000
Windows Server 2012 (Server Core installation) 1.000
Windows Server 2012 R2 1.000
Windows Server 2012 R2 (Server Core installation) 1.000

TI-2025-20530 CVE-2025-27737 · GHSA-ghmp-5866-2jgf

MEDIUM 41

Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00775 Published 2025-04-08 Fixed in 10.0.10240.20978, 10.0.14393.7969 +12 CWE-20