CVE-2025-27997: Blizzard Battle.net

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.

Affected products

• Blizzard Battle.net: version 2.40.0.15267 only

Published 2025-05-21. Last modified 2026-06-17.