CVE-2026-108399
HighCVSS 7.2Summary
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access can exploit this flaw to escalate privileges, potentially leading to takeover of the virtualization host.
Recommendation
Immediately deploy patches for Windows Hyper-V and restrict local access to trusted administrators.
Other vulnerabilities in Windows Hyper-V
See all- CVE-2026-96223High
A use-after-free vulnerability in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-88071High
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-87705High
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
- CVE-2026-85369High
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-85343High
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-83931High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-83839High
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-83728High
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
- CVE-2026-83716High
A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-70023High
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS