CVE-2025-21333 - Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CVE ID:CVE-2025-21333

Project:Microsoft

Product:Windows

Date Added:2025-01-14Due Date:2025-02-04

Vulnerability Name

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Description

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21333

https://nvd.nist.gov/vuln/detail/CVE-2025-21333

Top Security News

Latest CVE List

Common Alerts

MediumHTTPS to HTTP Insecure Transition in Form Post
HighCross-Domain Misconfiguration - Adobe - Read
LowStrict-Transport-Security Header Not Set
MediumSession ID in URL Rewrite
HighCORS Misconfiguration
HighLog4Shell (CVE-2021-45046)
HighExternal Redirect
LowDangerous JS Functions
LowFull Path Disclosure
MediumInteger Overflow Error