microsoft windows-server-2025 CVE-2025-21335 vulnerability in Microsoft Products
Published on January 14, 2025

product logo product logo
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Vendor Advisory NVD

Known Exploited Vulnerability

This Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.

The following remediation steps are recommended / required by February 4, 2025: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vulnerability Analysis

CVE-2025-21335 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2025-21335 has been classified to as a Dangling pointer vulnerability or weakness.


Products Associated with CVE-2025-21335

You can be notified by stack.watch whenever vulnerabilities like CVE-2025-21335 are published in these products:

Microsoft Windows Server 2025
 
Microsoft Windows 11 24h2
 
Microsoft Windows Server 2022 23h2
 
Microsoft Windows 11 23h2
 
Microsoft Windows 11
 
Microsoft Windows 10
 

What versions are vulnerable to CVE-2025-21335?