CVE-2026-69553
HighCVSS 7.1Summary
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker with network access could exploit this vulnerability to gain elevated privileges in the virtualization environment, potentially breaking VM isolation.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Hyper-V
See all- CVE-2026-80083High
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-72961High
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-69603High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2017-8714High
The Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1607, and Windows Server 2016 has a vulnerability allowing remote code execution when it fails to properly validate input from an authenticated user on a guest operating system.
- CVE-2017-8664High
A vulnerability in Windows Hyper-V allows remote code execution when the system fails to properly validate input from a privileged user on a guest operating system.
- CVE-2017-0193High
A vulnerability in Windows Hyper-V allows an attacker to gain elevated privileges on a target guest operating system when Hyper-V instruction emulation fails to properly enforce privilege levels.
- CVE-2017-0212High
Windows Hyper-V contains a vulnerability that allows for elevation of privilege when Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 fail to properly validate vSMB packet data.
- CVE-2026-69910Critical
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-40402Critical
A use after free vulnerability in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
- CVE-2021-26867Critical
Remote code execution vulnerability in Windows Hyper-V. An attacker could exploit this flaw to execute arbitrary code on the host.
Original NVD description (English source)
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.

