CVE-2025-21335

Summary

CVE-2025-21335 is a newly disclosed vulnerability affecting the Windows Hyper-V NT Kernel Integration Service. This issue represents an Elevation of Privilege (EoP) vulnerability, allowing an attacker with local access to a Hyper-V host to gain system-level privileges. By exploiting a flaw in the Virtual Service Provider (VSP) component, an attacker can escalate their user-level privileges, potentially gaining control of the entire system. Microsoft has released a security update to address this vulnerability. It is recommended that all Hyper-V users apply the patch as soon as possible to mitigate the risk of successful attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.