CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability (CVE-2025-21335) Analysis and Mitigation Guide
[Affected Scope] Windows Server and Desktop operating systems running Windows Hyper-V virtualization environments
[Impact] A local attacker with low privileges can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise
[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access to virtualization hosts
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability (CVE-2025-21334) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server systems with the Hyper-V virtualization role enabled
[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with kernel-level (SYSTEM) privileges, leading to complete host compromise
[Mitigation] Immediately apply the February 2025 Microsoft Cumulative Security Updates and disable unnecessary Hyper-V services
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability (CVE-2025-21333) Analysis and Mitigation Guide
[Affected Scope] Windows Server and Desktop operating systems with the Windows Hyper-V virtualization role enabled
[Impact] A local attacker can exploit a heap-based buffer overflow (CWE-122) to execute arbitrary code with SYSTEM privileges, leading to complete host compromise
[Mitigation] Apply the official Microsoft security patches immediately, or temporarily disable non-essential Hyper-V services to reduce the attack surface
Windows Hyper-V Elevation of Privilege Vulnerability (CVE-2024-38080) Security Advisory
[Affected Scope] Windows 10, Windows 11, and Windows Server environments running the Hyper-V virtualization platform
[Impact] Local attackers with low-privilege access can exploit an integer overflow (CWE-190) to execute arbitrary code with SYSTEM privileges, leading to complete host compromise
[Mitigation] Immediately apply Microsoft's July 2024 cumulative security updates and restrict local access to virtualization hosts