CNNVD-202507-1077 Information

CNNVD ID

CNNVD-202507-1077

CVE-2025-48002

  • CNNVD Published: 2025-07-08

Description (Chinese)

Microsoft Hyper-V是美国微软(Microsoft)公司的一个应用程序。一种系统管理程序虚拟化技术,能够实现桌面虚拟化。 Microsoft Hyper-V存在输入验证错误漏洞。攻击者利用该漏洞可以获取敏感信息。以下产品和版本受到影响:Windows Server 2025 (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025。

Description (English)

Microsoft Hyper-V is an application of Microsoft United States. A system management process virtualization technology that enables desktop virtualization. Microsoft Hyper-V has an input authentication bug. The attackers use that loophole to obtain sensitive information. The following products and versions were affected: Windows Server 2025 (Server Core integration), Windows 11 Version 24H2 for ARM 64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025.

Hazard Level

High

Vulnerability Type

输入验证错误

Affected Vendor

微软

Published

2025-07-08

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48002

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48002

Share on: