CVE-2025-21334
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Published Jan 14, 2025 · updated Jun 17, 2026 · microsoft windows 10 21h2
Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.
Timeline
Detection, updates, and resolution for this record.
Jan 14, 2025 · Catalog
Detected
Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.
Jan 14, 2025 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Feb 4, 2025 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Feb 4, 2025
Affected
- cpe microsoft/windows 10 21h2version unspecified
- cpe microsoft/windows 10 22h2version unspecified
- cpe microsoft/windows 11 22h2version unspecified
- cpe microsoft/windows 11 23h2version unspecified
- cpe microsoft/windows 11 24h2version unspecified
- vendor Microsoft Windowsversion unspecified
Sources
- CISA KEVCVE-2025-21334
Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.
cisa.gov - CVE.orgCVE-2025-21334
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-21334
30-day exploitation probability 1.6%
first.org - NIST NVDCVE-2025-21334
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
nvd.nist.gov