CVE-2025-21333

Published Jan 14, 2025

Last updated 24 days ago

Microsoft

Windows

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-21333 is an elevation of privilege vulnerability found in Windows Hyper-V's NT Kernel Integration VSP (Virtual Switch Port). Successful exploitation allows a low-privileged user on a guest system to execute code on the host system with elevated privileges. Microsoft has confirmed active exploitation of this vulnerability. This vulnerability is one of three related Hyper-V flaws patched by Microsoft in February 2025, the others being CVE-2025-21334 and CVE-2025-21335. These vulnerabilities have a CVSS 3.1 base score of 7.8, indicating a high severity.

Description: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Source: secure@microsoft.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Exploit added on: Jan 14, 2025
Exploit action due: Feb 4, 2025
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-122
nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "C4AF6108-E473-4695-B5AE-A4449A7A6E22",
            "versionEndExcluding": "10.0.19044.5371"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "146C68DB-CB79-4CCA-BCCF-DDB7E6B543DC",
            "versionEndExcluding": "10.0.19045.5371"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D84EDF98-16E1-412A-9879-2C2FEF87FB2B",
            "versionEndExcluding": "10.0.22621.4751"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "79F031F0-7E96-4361-9E73-1617F5C51A5D",
            "versionEndExcluding": "10.0.22621.4751"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "BB980EBB-388D-4D0B-8154-C15EC4E77757",
            "versionEndExcluding": "10.0.22631.4751"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "78A3F671-95DC-442A-A511-1E875DF93546",
            "versionEndExcluding": "10.0.26100.2894"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "B315E632-8658-4CD5-972B-892C1CC738A3",
            "versionEndExcluding": "10.0.25398.1369"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "2CFD18D5-3C1F-4E3A-A143-EE3F1FFBB880",
            "versionEndExcluding": "10.0.26100.2894"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]