Rewterz
Mirai Botnet aka Katana – Active IOCs
January 15, 2025
Rewterz
Multiple Microsoft Products Zero-Day Vulnerabilities
January 15, 2025

Multiple Microsoft Windows Zero-Day Vulnerabilities Exploit in the Wild

Severity

High

Analysis Summary

CVE-2025-21333 CVSS:7.8

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability.

CVE-2025-21334 CVSS:7.8

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability.

CVE-2025-21335 CVSS:7.8

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability.

Impact

  • Gain Access
  • Buffer Overflow
  • Privilege Escalation

Indicators of Compromise

CVE

  • CVE-2025-21333

  • CVE-2025-21334

  • CVE-2025-21335

Affected Vendors

Microsoft

Affected Products

  • Microsoft Windows Server 2022
  • Microsoft Windows Server 2025
  • Microsoft Windows 11 Version 24H2 for x64-based Systems
  • Microsoft Windows 11 Version 24H2 for ARM64-based Systems
  • Microsoft Windows 11 Version 23H2 for x64-based Systems
  • Microsoft Windows 11 Version 23H2 for ARM64-based Systems
  • Microsoft Windows Server 2025 (Server Core installation)
  • Microsoft Windows 10 Version 22H2 for x64-based Systems
  • Microsoft Windows 11 Version 22H2 for x64-based Systems
  • Microsoft Windows 11 Version 22H2 for ARM64-based Systems
  • Microsoft Windows 10 Version 21H2 for x64-based Systems

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2025-21333

CVE-2025-21334

CVE-2025-21335