PT-2025-1052 · Microsoft · Windows Hyper-V+1

Published 2025-01-14 · Updated 2026-06-01 · CVE-2025-21334

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

The affected software is Microsoft Windows Hyper-V, specifically the NT Kernel Integration VSP component. The issue is related to an elevation-of-privilege problem, potentially linked to a use-after-free issue, allowing attackers to escalate privileges on the system to the level of SYSTEM. An exploit for this issue is potentially available, but caution should be exercised when accessing such links to avoid any potential security risks. The provided information does not specify exact versions of the affected software, but it mentions a critical Hyper-V vulnerability. There have been recorded instances of this issue being exploited by attackers. #Microsoft #WindowsHyperV #NTKernelIntegrationVSP #ElevationOfPrivilege #UseAfterFree #HyperV

Fix

LPE

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-00282

CVE-2025-21334

Affected Products

Windows Hyper-V

Windows

References · 56

• https://bdu.fstec.ru/vul/2025-00282 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21334 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21334 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/716852 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21334 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21334 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21334 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21334 · Security Note
• https://twitter.com/_CYOPS/status/1879418804482326598 · Twitter Post
• https://reddit.com/r/Action1/comments/1i1d6m5/the_first_patch_tuesday_of_2025_is_here · Reddit Post
• https://twitter.com/DMFezzaReed/status/1879281215708053647 · Twitter Post
• https://twitter.com/DMFezzaReed/status/1879527175755370727 · Twitter Post
• https://twitter.com/TechMash365/status/1879981992273752281 · Twitter Post
• https://twitter.com/Loginsoft_Inc/status/1881575378415960453 · Twitter Post
• https://twitter.com/cybrhoodsentinl/status/1879592741296030149 · Twitter Post