Microsoft’s Security Update Guide lists CVE-2025-54098 as an Improper access control vulnerability in Windows Hyper‑V that allows an authorized attacker to elevate privileges locally, a condition that requires immediate attention from anyone running Hyper‑V hosts, management servers, or...
cve-2025-54098
hyper-v
improper access control
incident response
live migration
local privilege escalation
msrc
patch management
patchverification
sccm
threat detection
vhdx
virtualization security
vm escapes
vmms.exe
vsp
windows server
windows update catalog
windows virtualization
wsus
Windows Hyper‑V contains a vulnerability tracked as CVE‑2025‑48807 that, according to the vendor advisory, stems from improper restriction of a Hyper‑V communication channel to its intended endpoints and can be abused by an authorized attacker to execute code locally on an affected host. This...