CVE-2026-70023

A use-after-free vulnerability in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.