CNNVD-202511-1065 Information

CNNVD ID

CNNVD-202511-1065

CVE-2025-60706

  • CNNVD Published: 2025-11-11

Description (Chinese)

Microsoft Hyper-V是美国微软(Microsoft)公司的一个应用程序。一种系统管理程序虚拟化技术,能够实现桌面虚拟化。 Microsoft Hyper-V存在缓冲区错误漏洞。攻击者利用该漏洞可以获取敏感信息。以下产品和版本受到影响:Windows 10 Version 1809 for x64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 22H2 for x64-based Systems,Windows Server 2025 (Server Core installation),Windows 11 Version 25H2 for ARM64-based Systems,Windows 11 Version 25H2 for x64-based Systems,Windows 11 Version 23H2 for ARM64-based Systems,Windows 11 Version 23H2 for x64-based Systems,Windows Server 2022, 23H2 Edition (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 2016 (Server Core installation)。

Description (English)

Microsoft Hyper-V is an application of Microsoft United States. A system management process virtualization technology that enables desktop virtualization. Microsoft Hyper-V has an error hole in the buffer zone. The attackers use that loophole to obtain sensitive information. The following products and versions have been affected: Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 (Server Corporation 2022, Windows Server 2022 (Server Corporation), Windows 10 Services 21H2 for x64-based Systems, Windows 10 Services 22H2 for x 25H2-systems, Windows 24-Sysights, Windows Servers 2020(Server Serbia 2025-Sights)

Hazard Level

High

Vulnerability Type

缓冲区错误

Affected Vendor

微软

Published

2025-11-11

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60706

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60706

Share on: