PT-2025-37069

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20 Description: Dell PowerProtect Data Manager versions 19.19 and 19.20, when used with Hyper-V, contain a path traversal vulnerability. A high-privileged attacker with local access could...

PT-2025-37059

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20 Description: Dell PowerProtect Data Manager, Hyper-V, versions 19.19 and 19.20 contain a vulnerability that allows the insertion of sensitive information into log files. A low-privileged...

CVE-2025-22045

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flushtlbrange when used for zapping normal PMDs On the following path, flushtlbrange can be used for zapping normal PMD entries PMD entries that point to page tables together with the PTE entries in the pointed-to pag...

April 16, 2025—KB5059092 (OS Build 20348.3566) Out-of-band

None None...

April 16, 2025—KB5059091 (OS Build 17763.7249) Out-of-band

None None...

April 16, 2025—KB5059087 (OS Build 26100.3781) Out-of-band

None None...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty, OpenSSL, libcurl, and IBM Java may affect IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V

Summary IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V can be affected by security flaws in IBM WebSphere Application Server Liberty, OpenSSL, libcurl, and IBM Java. The flaws can lead to denial of service, sensitive information exposure, memory resource...

CVE-2025-27491

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network...

KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel

...

The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-27491

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network...

CVE-2025-27491

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network...

CVE-2025-27491 Windows Hyper-V Remote Code Execution Vulnerability

...

CVE-2025-27491 Windows Hyper-V Remote Code Execution Vulnerability

...

CVE-2025-27491

CVE-2025-27491 is a Windows Hyper-V remote code execution vulnerability described in the initial document as a use-after-free that could allow an authenticated attacker to execute code over the network. Connected sources corroborate Hyper-V as the affected component and reference patch delivery i...

Windows Hyper-V Remote Code Execution Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network...

SUSE CVE-2025-21977

In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs Gen 2 Hyper-V VMs boot via EFI and have a standard EFI framebuffer device. When the kdump kernel runs in such a VM, loading the efifb driver may hang because of...

CVE-2025-27491: Use After Free

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network...

Microsoft Hyper-V 资源管理错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A resource management error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could remotely execute code. The...

PT-2025-15549 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to a use after free condition in Windows Hyper-V, which can be exploited by a remote attacker to execute arbitrary code. This can potentially allow an attacker ...