CVE-2025-29955

EUVD-2025-14421
Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service locally.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
microsoftCNA
6.2 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_11_24h2
𝑥
< 10.0.26100.4061
microsoftwindows_server_2022_23h2
𝑥
< 10.0.25398.1611
microsoftwindows_server_2025
𝑥
< 10.0.26100.4061
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 11
24H2 (x64)
KB5058411
Windows Server 2022
23H2 Server Core
KB5058384
Windows Server 2025
Server Core
KB5058411
Standard
KB5058411
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29955