PT-2025-1057 · Microsoft · Windows Hyper-V Nt Kernel Integration Vsp+1

Oruga · Published 2025-01-14 · Updated 2026-05-05 · CVE-2025-21333

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Hyper-V NT Kernel Integration VSP versions are affected, but specific versions are not provided in the input data.

Description The issue is related to an elevation of privilege vulnerability in Windows Hyper-V NT Kernel Integration VSP, which could allow attackers to gain full system control. It is mentioned that hackers could exploit this to elevate privileges to the SYSTEM level. There are reports of this vulnerability being exploited in real-world incidents. The estimated number of potentially affected devices worldwide is not specified. Technical details about exploitation include a heap-based buffer overflow.

Recommendations Since specific affected versions are not provided, a general recommendation cannot be accurately tailored to each version. However, for Windows Hyper-V NT Kernel Integration VSP, updating to a version that includes a fix for the elevation of privilege vulnerability is recommended. Each user should check the official Microsoft website for the latest updates and patches for their specific version of Windows Hyper-V NT Kernel Integration VSP.

Exploit

Fix

LPE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-00287

CVE-2025-21333

Affected Products

Windows

Windows Hyper-V Nt Kernel Integration Vsp

References · 109

• 🔥 https://github.com/MrAle98/CVE-2025-21333-POC · Exploit
• 🔥 https://exploit-db.com/exploits/52436 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-21333 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/716853 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21333 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21333 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21333 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00287 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21333 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21333 · Vendor Advisory
• https://reddit.com/r/Action1/comments/1i1vbh5/2025_starts_with_a_bang_microsofts_largest_patch · Reddit Post
• https://t.me/proxy_bar/2535 · Telegram Post
• https://reddit.com/r/sysadmin/comments/1inqrj6/windows_hyperv_nt_kernel_integration_vsp · Reddit Post
• https://twitter.com/NickBla41002745/status/1879917810404790354 · Twitter Post
• https://twitter.com/Komodosec/status/1909731766568730824 · Twitter Post