KEV · Actively exploited
CVE-2025-21335
HIGH 7.8
KEV
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
EPSS
7.65%
above median
percentile 92.0%
CISA Known Exploited Vulnerability
- Added to KEV
- 2025-01-14
- Remediation deadline
- 2025-02-04
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Ransomware
- No
OS versions that fix this CVE
This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.
- Windows Fixed in Windows Server 2025 (Server Core installation) 10.0.26100.2894 Windows Server 2025 10.0.26100.2894 Windows Server 2022 10.0.25398.1369 Windows 11 24H2 · 2024-H2 10.0.26100.2894 Windows 11 23H2 · 2023-H2 10.0.22631.4751 Windows 11 22H2 · 2022-H2 10.0.22621.4751 Windows 10 22H2 · 2022-H2 10.0.19045.5371 Windows 10 21H2 · 2021-H2 10.0.19044.5371