PT-2025-1058 · Microsoft · Windows Hyper-V Nt Kernel Integration Vsp+1

Published 2025-01-14 · Updated 2026-06-01 · CVE-2025-21335

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Hyper-V NT Kernel Integration VSP versions are not explicitly specified in the provided sources.

Description The issue is related to an elevation of privilege in Windows Hyper-V NT Kernel Integration VSP, allowing an attacker to elevate privileges to the level of SYSTEM. There are reports of this issue being exploited. The exploitation of this vulnerability may allow a local attacker to affect the system.

Recommendations No specific recommendations for resolving the issue are provided in the input data for any affected versions of Windows Hyper-V NT Kernel Integration VSP.

Fix

LPE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-00288

CVE-2025-21335

Affected Products

Windows

Windows Hyper-V Nt Kernel Integration Vsp

References · 55

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21335 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21335 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00288 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21335 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21334 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21335 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21335 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21335 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/716851 · Security Note
• https://t.me/thehackernews/6168 · Telegram Post
• https://reddit.com/r/Action1/comments/1i1d6m5/the_first_patch_tuesday_of_2025_is_here · Reddit Post
• https://twitter.com/TMJIntel/status/1879503046100635742 · Twitter Post
• https://twitter.com/CEEKTechnology/status/1879440520520638842 · Twitter Post
• https://t.me/avleonovcom/1515 · Telegram Post
• https://twitter.com/CISACyber/status/1879279464363745727 · Twitter Post