CVE-2025-21334

CISA Known Exploited Vulnerability (KEV)

Name

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Exploit added

January 14, 2025

Action due

February 4, 2025

Action required

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

CWE-ID	CWE Name
CWE-416	Use After Free

Source:
NVD

Published:
January 14, 2025

Updated:
January 15, 2025

Base score:
7.8

Severity:

HIGH

Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Not defined