3388 matches found
CVE-2025-48822
CVE-2025-48822 is an out-of-bounds read vulnerability in Windows Hyper-V that could enable local code execution. The connected NCSC entry explicitly lists the impact as Execution of arbitrary code on Windows Hyper‑V, with CVSS base score 8.6 (LOCAL, HIGH). The documents do not provide additional ...
CVE-2025-48002 Windows Hyper-V Information Disclosure Vulnerability
...
CVE-2025-48002 Windows Hyper-V Information Disclosure Vulnerability
...
CVE-2025-48002
CVE-2025-48002 (Windows Hyper-V) describes an information-disclosure flaw caused by an integer overflow/wraparound in Hyper-V. An authenticated attacker on an adjacent network can potentially disclose data from the host. Public exploit presence is noted in referenced materials. Remediation is via...
Windows Hyper-V Denial of Service Vulnerability
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network...
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally...
Windows Hyper-V Information Disclosure Vulnerability
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network...
PT-2025-28553
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is an out-of-bounds read that allows an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no information about a newer version that...
Microsoft Hyper-V 安全漏洞
Microsoft Hyper-V is an application from Microsoft USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. An attacker has exploited the vulnerability to cause a denial of service on the system. The following...
PT-2025-28531 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to an integer overflow or wraparound in Windows Hyper-V, which allows an authorized attacker to disclose information over an adjacent network. This can...
Microsoft Hyper-V 输入验证错误漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An input validation error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive...
Microsoft Hyper-V 缓冲区错误漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A buffer error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could remotely execute code. The following...
PT-2025-28528 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to missing synchronization in Windows Hyper-V, which allows an authorized attacker to deny service over an adjacent network. Recommendations: At the moment, the...
PT-2025-30134
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the KVM component related to handling hypercalls HVCALL FLUSH VIRTUAL ADDRESS LIST and HVCALL FLUSH VIRTUAL ADDRESS LIST EX within KVM guests utilizin...
Vulnerability of the vmbus_connect() function in the drivers/hv/connection.c module – Microsoft Hyper-V guest mode support driver for Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the vmbusconnect function in the drivers/hv/connection.c module – Microsoft’s Linux-based Hyper-V guest mode driver has a vulnerability that exposes confidential system information due to unprocessed debugging information. Exploitation of this vulnerability could allow an attacke...
Vulnerability of the __vmbus_establish_gpadl() function in the drivers/hv/channel.c module – Microsoft Hyper-V guest mode support driver for Linux operating systems. This driver allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the vmbusestablishgpadl function in the drivers/hv/channel.c module – The Microsoft Hyper-V guest mode support driver for Linux operating systems is vulnerable because it exposes confidential system information due to uncleaned debugging information. Exploitation of this...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fixed an address space leak when the Hyper-V DRM device is removed. When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram and maps it as cacheable. If the device is removed, or if the devic...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Fixed a hang that occurred in the kdump kernel when running on Hyper-V Gen 2 VMs. Hyper-V Gen 2 VMs boot via EFI and have a standard EFI framebuffer device. When the kdump kernel runs in such a VM, loading the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86 – Reject Hyper-V’s SENDIPI hypercalls if the local APIC is not part of the kernel. Advertise support for Hyper-V’s SENDIPI and SENDIPIEX hypercalls only if the local API is emulated/virtualized by KVM. Explicitly reje...
