CVE-2025-48811

CVE-2025-48811 affects Windows Virtualization-Based Security (VBS) Enclave, with the root cause described as missing integrity check in the Enclave. The NCSC advisory lists this CVE as impacting Windows VBS Enclave and notes an ability to obtain increased privileges. The entry indicates that Micr...

CVE-2025-48803

CVE-2025-48803 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is a missing integrity check in the Enclave, enabling an authorized local attacker to obtain elevated privileges. The NCSC aggregation also lists CVE-2025-48803 with an impact of gaining elevated privileges...

CVE-2025-47159 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...

CVE-2025-47159

CVE-2025-47159 affects Windows Virtualization-Based Security (VBS) Enclave. The vulnerability is a protection mechanism failure that could allow an authorized local attacker to escalate privileges. Affected component: VBS Enclave in Windows. Outcome: local privilege escalation with HIGH impact if...

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2025-28536 · Microsoft · Windows Virtualization-Based Security +1

Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS affected versions not specified Description: The issue concerns a lack of integrity check support in Windows Virtualization-Based Security VBS Enclave, allowing an authorized attacker to locally eleva...

PT-2025-28507 · Microsoft · Windows Virtualization-Based Security +2

Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS Enclave affected versions not specified Description: The issue is related to a protection mechanism failure in Windows Virtualization-Based Security VBS Enclave, allowing an authorized attacker to...

CVE-2025-47969 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

...

VulnCheck KEV: CVE-2024-21407

Windows Hyper-V Remote Code Execution Vulnerability...

CVE-2025-27735

Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2025-27735

Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2025-27735

CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

PT-2025-15558 · Microsoft · Windows Virtualization-Based Security (Vbs) Enclave +1

Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS Enclave affected versions not specified Description: The issue is related to insufficient verification of data authenticity, allowing an authorized attacker to bypass a security feature locally. There...

CVE-2025-21370

CVE-2025-21370 is a Windows VBS Enclave Elevation of Privilege vulnerability. Public sources describe an input-validation error in the VBS Enclave that can allow privilege escalation on Windows 11 variants (22H2/23H2/24H2). Exploitation is reported publicly, and Microsoft has released updates (e....

CVE-2025-21370 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2025-21340 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

...

Microsoft Windows Virtualization-Based Security Enclave 访问控制错误漏洞

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment within the host application address space from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Virtualization-Based...

PT-2025-4220 · Microsoft · Windows Virtualization-Based Security +1

Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS affected versions not specified Description: A security-feature bypass issue allows attackers to affect the system. This issue is related to the Windows Virtualization-Based Security VBS and enables...

CVE-2024-49076

Windows Virtualization-Based Security VBS Enclave Elevation of Privilege Vulnerability...