CISA Known Exploited Vulnerability

CVE-2025-21333

Microsoft · Windows

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Date added
BOD 22-01 due date
CWE CWE-122
Ransomware Unknown

CISA description

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.