{"id":47323,"date":"2025-06-01T12:44:56","date_gmt":"2025-06-01T12:44:56","guid":{"rendered":""},"modified":"2025-08-29T21:31:31","modified_gmt":"2025-08-30T03:31:31","slug":"cve-2025-27997-privilege-escalation-vulnerability-in-blizzard-battle-net","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-27997-privilege-escalation-vulnerability-in-blizzard-battle-net\/","title":{"rendered":"CVE-2025-27997: Privilege Escalation Vulnerability in Blizzard Battle.net<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The cybersecurity world is always on the lookout for potential threats and vulnerabilities that could compromise the integrity of systems and data. One such vulnerability has been identified in Blizzard Battle.net v2.40.0.15267, a popular gaming platform used worldwide. This vulnerability, classified under CVE-2025-27997, allows attackers to escalate privileges<\/a> by placing a specially crafted shell script or executable into a specific directory. This vulnerability is critical<\/a> because if exploited, it can potentially lead to system compromise or data leakage, affecting millions of gamers and potentially leading to significant financial and reputational loss.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-27997
\nSeverity: High (8.4 CVSS Score)
\nAttack Vector: Local
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: System compromise and potential<\/a> data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n