Elevated Privilege Vulnerability in Windows Hyper-V by Microsoft
CVE-2025-21334

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Windows 10 Version 21h2
Windows 11 Version 22h2
Windows 10 Version 22h2
Windows Server 2025 (server Core Installation)
Vendor
CVE Published:
14 January 2025

Summary

A vulnerability exists in the Windows Hyper-V integration components that allows an attacker to elevate their privileges. By exploiting this issue, a malicious user could gain increased access to the system, potentially leading to unauthorized tasks or executing harmful applications. Microsoft has released a detailed advisory on this vulnerability, encouraging users to apply patches and updates to mitigate the risks associated with it.

Affected Version(s)

Windows 10 Version 21H2 x64-based Systems 10.0.19043.0 < 10.0.19044.5371

Windows 10 Version 22H2 x64-based Systems 10.0.19045.0 < 10.0.19045.5371

Windows 11 version 22H2 ARM64-based Systems 10.0.22621.0 < 10.0.22621.4751

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.