← back
CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CVSS 7.8 HIGHEPSS 1.5%● KEVCWE-416
In short

A security flaw in Windows Hyper-V allows a user with limited privileges to gain higher system access by exploiting a vulnerability in the NT Kernel Integration VSP component. This is dangerous because it lets attackers bypass security protections and take control of critical system functions.

Technical detail

This vulnerability exists in the Hyper-V NT Kernel Integration VSP (Virtual Service Provider) and allows privilege escalation through improper memory handling (CWE-416: Use-After-Free). An attacker with local access can exploit this flaw to execute arbitrary code with elevated privileges, bypassing isolation boundaries.

Summary generated and translated by AI from the official description.
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →