NetSight
IP …
high7.8Known exploited

CVE-2025-21335

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-01-14. Federal due date: 2025-02-04.

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Impact

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Affected products

VendorProductAffected versions
MicrosoftWindows 10 21h2
before 10.0.19044.5371
MicrosoftWindows 10 22h2
before 10.0.19045.5371
MicrosoftWindows 11 22h2
before 10.0.22621.4751
MicrosoftWindows 11 23h2
before 10.0.22631.4751
MicrosoftWindows 11 24h2
before 10.0.26100.2894
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1369
MicrosoftWindows Server 2025
before 10.0.26100.2894

Weakness classification

CWE-416

References