fkie_cve-2025-48822
Vulnerability from fkie_nvd
Published
2025-07-08 17:15
Modified
2025-07-15 14:37
Severity ?
Summary
Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.
References
▶ | URL | Tags | |
---|---|---|---|
secure@microsoft.com | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48822 | Vendor Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", "matchCriteriaId": "3CEAC32A-5246-4F6B-8DD5-E49F3BA621DA", "versionEndExcluding": "10.0.14393.8246", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", "matchCriteriaId": "2062C268-282B-4E52-9F8C-876A2D483EAD", "versionEndExcluding": "10.0.17763.7558", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*", "matchCriteriaId": "B23EB65C-8083-4844-9C2A-1942497E5B45", "versionEndExcluding": "10.0.19044.6093", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*", "matchCriteriaId": "207B6C07-EE20-4011-9C9E-04786304ED68", "versionEndExcluding": "10.0.19045.6093", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "matchCriteriaId": "76FEE1E8-EB22-4E01-86D7-13B35F9D2876", "versionEndExcluding": "10.0.22621.5624", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "matchCriteriaId": "19D0DAB7-4BFF-4BB7-9E0E-B020CF8573C9", "versionEndExcluding": "10.0.22631.5624", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E866DB2-9CA7-4BCC-8591-9BC94300B779", "versionEndExcluding": "10.0.26100.4652", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6FA4941-0641-4EA0-99A8-97121F625380", "versionEndExcluding": "10.0.14393.8246", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "matchCriteriaId": "DCFD9FA0-D149-422A-975C-582C9BC9024D", "versionEndExcluding": "10.0.17763.7558", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "AE46D39E-7048-4A31-9753-39F6E5F97D1D", "versionEndExcluding": "10.0.20348.3932", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "matchCriteriaId": "613302B8-D5C2-4908-9FC9-0EC1650D4517", "versionEndExcluding": "10.0.25398.1732", "vulnerable": true }, { "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "matchCriteriaId": "10E640FB-32AB-45B6-BC42-56CC587C0A35", "versionEndExcluding": "10.0.26100.4652", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally." }, { "lang": "es", "value": "La lectura fuera de los l\u00edmites en Windows Hyper-V permite que un atacante no autorizado ejecute c\u00f3digo localmente." } ], "id": "CVE-2025-48822", "lastModified": "2025-07-15T14:37:44.493", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 6.0, "source": "secure@microsoft.com", "type": "Primary" } ] }, "published": "2025-07-08T17:15:47.363", "references": [ { "source": "secure@microsoft.com", "tags": [ "Vendor Advisory" ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48822" } ], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-125" } ], "source": "secure@microsoft.com", "type": "Primary" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…