Product:
Windows Hyper-V
Summary
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive information. It is classified as having a medium severity level due to its potential impact on confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-60706 |
Exploitation
To exploit this vulnerability, an attacker with local access must leverage the out-of-bounds read condition in Windows Hyper-V. By carefully crafting specific inputs, the attacker can trigger the vulnerability and gain access to sensitive information that should not be disclosed. This requires low privileges and does not necessitate user interaction.
Affected Products
- Windows Hyper-V: A virtualization technology that allows users to run multiple operating systems on a single physical machine.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring for any unusual activity can help protect against potential exploitation of this vulnerability.