Product:
Windows Hyper-V
Summary
Integer underflow in Windows Hyper-V allows an authorized attacker to deny service over a network. This vulnerability can lead to significant service disruptions. It is classified as a medium severity issue due to its potential impact on availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-62567 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the network where Windows Hyper-V is deployed. By sending specially crafted packets, the attacker can trigger the integer underflow condition, leading to a denial of service. This requires a high level of attack complexity, making it less accessible to less skilled attackers.
Affected Products
- Windows Hyper-V: A virtualization technology that allows users to create and manage virtual machines.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, monitoring network traffic for unusual patterns can help detect potential exploitation attempts. Ensuring that only authorized users have access to the network can also reduce the risk.