Skip to main content

Windows 11 22h2 CVE-2025-21370

HIGH
Improper Input Validation (CWE-20)
2025-01-14 secure@microsoft.com
Microsoft Information Disclosure Windows 11 22h2 Windows 11 23h2 Windows 11 24h2 Windows
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 28, 2026 - 18:03 vuln.today
Patch released
Mar 28, 2026 - 18:03 nvd
Patch available
CVE Published
Jan 14, 2025 - 18:16 nvd
HIGH 7.8

DescriptionCVE.org

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

AnalysisAI

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-20. Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Affected products include: Microsoft Windows 11 22H2, Microsoft Windows 11 23H2, Microsoft Windows 11 24H2.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Share

CVE-2025-21370 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy