CNNVD-202509-1319 Information

CNNVD ID

CNNVD-202509-1319

CVE-2025-54115

  • CNNVD Published: 2025-09-09

Description (Chinese)

Microsoft Hyper-V是美国微软(Microsoft)公司的一个应用程序。一种系统管理程序虚拟化技术,能够实现桌面虚拟化。 Microsoft Hyper-V存在竞争条件问题漏洞。攻击者利用该漏洞可以提升权限。以下产品和版本受到影响:Windows Server 2019 (Server Core installation),Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 21H2 for x64-based Systems,Windows 11 Version 22H2 for ARM64-based Systems,Windows 11 Version 22H2 for x64-based Systems,Windows 10 Version 22H2 for x64-based Systems,Windows Server 2025 (Server Core installation),Windows 11 Version 23H2 for ARM64-based Systems,Windows 11 Version 23H2 for x64-based Systems,Windows Server 2022, 23H2 Edition (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025,Windows 10 Version 1809 for x64-based Systems,Windows Server 2019。

Description (English)

Microsoft Hyper-V is an application of Microsoft United States. A system management process virtualization technology that enables desktop virtualization. Microsoft Hyper-V has a gap in competition conditions. The attackers use this loophole to enhance their authority. The following products and versions are affected: Windows Server 2019 (Server Corporation), Windows Server 2022, Windows Server 2022 (Server Corporation 21H2 for x64-based Systems, Windows 11 Vers. 22H2 for ARM64-Systems, Windows 23H2 for ARM 64-Systems, Windows Services 11; Windows Services 11

Hazard Level

Medium

Vulnerability Type

竞争条件问题

Affected Vendor

微软

Published

2025-09-09

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54115

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54115

Share on: