NetSight
high7.1

CVE-2025-27491

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.

Impact

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1507
before 10.0.10240.20978
MicrosoftWindows 10 1607
before 10.0.14393.7969
MicrosoftWindows 10 1809
before 10.0.17763.7136
MicrosoftWindows 10 21h2
before 10.0.19044.5737
MicrosoftWindows 10 22h2
before 10.0.19045.5737
MicrosoftWindows 11 22h2
before 10.0.22621.5189
MicrosoftWindows 11 23h2
before 10.0.22631.5189
MicrosoftWindows 11 24h2
before 10.0.26100.3775
MicrosoftWindows Server 2016
before 10.0.14393.7969
MicrosoftWindows Server 2019
before 10.0.17763.7136
MicrosoftWindows Server 2022
before 10.0.20348.3453
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1551

Weakness classification

References