CVE-2025-21334

Summary dbcve.org

This is an elevation of privilege vulnerability in Windows Hyper-V's NT Kernel Integration Virtual Service Provider (VSP). The VSP component handles communication between guest virtual machines and the host hypervisor. The vulnerability allows an attacker with code execution within a guest VM to elevate privileges beyond the intended VM boundaries, potentially escaping guest isolation to compromise the hypervisor host or other VMs.

Mitigation

Apply Microsoft security updates for CVE-2025-21334 to all Windows systems running Hyper-V. Prioritize patching hypervisor hosts and ensure guest VMs are also updated. Verify virtualization isolation is maintained post-patch.