CVE Catalog

Actively exploited in the wild

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft - Windows · Listed in the CISA KEV since 2025-01-14. This indicates confirmed attacks in production environments.

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2025-21334

HighCVSS 7.8KEV
Published: Updated: Translated: NVD NIST

Summary

A vulnerability in Windows Hyper-V NT Kernel Integration VSP allows for elevation of privilege. Technical details are not provided in the description.

Risk Assessment

An attacker with local access could exploit this vulnerability to gain higher privileges in the system, potentially leading to control over the virtual machine or host.

Recommendation

Apply the latest Windows security updates provided by Microsoft that address this vulnerability.

Other vulnerabilities in Windows Hyper-V

See all
Original NVD description (English source)

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS