Exploit / PoCcriticalExploited in the wild

Microsoft fixes actively exploited Windows Hyper-V zero-day flaws

Help Net Securityby @zeljkazorzJan 14, 2025 · 00:00 UTC (Jan 14, 2025)3 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-21333 CVE-2025-21334 CVE-2025-21335 CVE-2025-21186 CVE-2025-21366 CVE-2025-21395 CVE-2024-49142 CVE-2025-21298 CVE-2025-21210

Tags: cve-2025-21333 cve-2025-21334 cve-2025-21335 cve-2025-21186 cve-2025-21366 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-49142	Microsoft Access Remote Code Execution Vulnerability	7.8	1%		Dec 12, 2024
CVE-2025-21186 +2 related CVEs CVE-2025-21366 CVE-2025-21395	Microsoft Access Remote Code Execution Vulnerability	7.8	1%		Jan 14, 2025
CVE-2025-21298 +1 related CVE CVE-2025-21210	Use-After-Free RCE in Windows OLE (CVE-2025-21298)	9.8 group max	74%	PoC	Jan 14, 2025
CVE-2025-21333 +2 related CVEs CVE-2025-21334 CVE-2025-21335	Actively Exploited Heap Overflow in Windows Hyper-V VSP Enables Privilege Escalation	7.8	10%	KEVPoC	Jan 14, 2025 KEV Jan 14, 2025

From the original article

3 min read at helpnetsecurity.com

Microsoft has marked January 2025 Patch Tuesday with a hefty load of patches: 157 CVE-numbered security issues have been fixed in various products, three of which (in Hyper-V) are being actively exploited.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.