Windows CVE-2025-21333
HIGHCVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
5DescriptionNVD
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
AnalysisAI
Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow allowing authorized local attackers to escalate privileges, one of three Hyper-V zero-days exploited in January 2025 Patch Tuesday.
Technical ContextAI
The CWE-122 heap overflow in the VSP (Virtual Service Provider) component of Hyper-V's NT Kernel Integration allows local attackers to corrupt heap memory and escalate privileges from guest VM or local user context.
RemediationAI
Apply January 2025 Patch Tuesday updates. Monitor Hyper-V hosts for anomalous behavior. Consider isolating high-security workloads on dedicated hosts.
More from same product – last 7 days
{filename} endpoint. The flawed traversal guard only rejects forward slashes and '..' sequences, so absolute Windows pat
Remote code execution in Microsoft Azure Orbital Spatio allows unauthenticated network attackers to upload dangerous fil
Unsafe deserialization in Microsoft Planetary Computer Pro (Geocatalog) lets a remote unauthenticated attacker craft mal
Remote code execution in Microsoft Power Pages allows unauthenticated network attackers to inject and execute operating-
Privilege elevation in Microsoft Azure Resource Manager (ARM) allows remote unauthenticated attackers to bypass authenti
Share
External POC / Exploit Code
Leaving vuln.today