CVE-2025-21335

Description

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Reserved 2024-12-11 | Published 2025-01-14 | Updated 2025-01-17 | Assigner microsoft

CISA Known Exploited Vulnerability

Date added 2025-01-14 | Due date 2025-02-04

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Problem types

CWE-416: Use After Free

Product status

10.0.19043.0 before 10.0.19044.5371
affected

10.0.22621.0 before 10.0.22621.4751
affected

10.0.19045.0 before 10.0.19045.5371
affected

10.0.26100.0 before 10.0.26100.2894
affected

10.0.22631.0 before 10.0.22631.4751
affected

10.0.22631.0 before 10.0.22631.4751
affected

10.0.25398.0 before 10.0.25398.1369
affected

10.0.26100.0 before 10.0.26100.2894
affected

10.0.26100.0 before 10.0.26100.2894
affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21335 (Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability) vendor-advisory

cve.org (CVE-2025-21335)

nvd.nist.gov (CVE-2025-21335)

Download JSON