The vulnerability of the Windows Virtual Hard Disk component allows attackers to exploit their privileges.

The vulnerability of the Windows Virtual Hard Disk component in Windows operating systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-49689

Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-49689

Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-49683

Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to execute code locally...

CVE-2025-49683

Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to execute code locally...

CVE-2025-47973

Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-47971

Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-47971

Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-47973

Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-49683 Microsoft Virtual Hard Disk Remote Code Execution Vulnerability

...

CVE-2025-49683 Microsoft Virtual Hard Disk Remote Code Execution Vulnerability

...

CVE-2025-47973 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-47973

Technical details about CVE-2025-47973 are not publicly disclosed in the provided documents. No affected products, root cause, or remediation are described here. Monitor for updates from the sources.

CVE-2025-47973 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-49689 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-49689 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-49689

Technical details for CVE-2025-49689 (affected product/component/impact) are not publicly available in the provided documents. Monitor for updates from official sources; no concrete vendor/version/exploit information is available here.

CVE-2025-47971 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-47971 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-47971

CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...