CVE Catalog
CVE-2026-20825
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk0.51%
41th percentile - higher than 41% of all known CVEs
Summary
An improper access control vulnerability in Windows Hyper-V allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential data leakage between virtual machines or to the host by an authorized user.
Recommendation
It is recommended to apply security patches and verify virtual machine isolation configuration.
Original NVD description (English source)
Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.