msrc_CVE-2025-21370

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

view advisory published 2025-01-14

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-21370US	high8.8	0.47% (41st)	—	2025-01-14
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

External citations — patches, advisories, analysis.

FixedWindows 11 Version 22H2 for ARM64-based Systems
10.0.22621.4751:Security Update:https://support.microsoft.com/help/5050021
https://support.microsoft.com/help/5050021
FixedWindows 11 Version 22H2 for x64-based Systems
10.0.22621.4751:Security Update:https://support.microsoft.com/help/5050021
https://support.microsoft.com/help/5050021
FixedWindows 11 Version 23H2 for ARM64-based Systems
10.0.22631.4751:Security Update:https://support.microsoft.com/help/5050021
https://support.microsoft.com/help/5050021
FixedWindows 11 Version 23H2 for x64-based Systems
10.0.22631.4751:Security Update:https://support.microsoft.com/help/5050021
https://support.microsoft.com/help/5050021
FixedWindows 11 Version 24H2 for ARM64-based Systems
10.0.26100.2894:Security Update:https://support.microsoft.com/help/5050009
https://support.microsoft.com/help/5050009
FixedWindows 11 Version 24H2 for x64-based Systems
10.0.26100.2894:Security Update:https://support.microsoft.com/help/5050009
https://support.microsoft.com/help/5050009

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.