CVE

CVE-2025-21335

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft · Windows

Date added (CISA)

2025-01-14

Remediation due

2025-02-04

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.