Unspecified vulnerability in Xen (CNVD-2025-21370)

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. Xen has a security vulnerability that can be exploited by...

CVE-2025-21370

Windows Virtualization-Based Security VBS Enclave Elevation of Privilege Vulnerability...

CVE-2025-21370 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2025-21370

CVE-2025-21370 is a Windows VBS Enclave Elevation of Privilege vulnerability. Public sources describe an input-validation error in the VBS Enclave that can allow privilege escalation on Windows 11 variants (22H2/23H2/24H2). Exploitation is reported publicly, and Microsoft has released updates (e....