CVE-2026-72961

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.

The Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1607, and Windows Server 2016 has a vulnerability allowing remote code execution when it fails to properly validate input from an authenticated user on a guest operating system.

A vulnerability in Windows Hyper-V allows remote code execution when the system fails to properly validate input from a privileged user on a guest operating system.

A vulnerability in Windows Hyper-V allows an attacker to gain elevated privileges on a target guest operating system when Hyper-V instruction emulation fails to properly enforce privilege levels.

Windows Hyper-V contains a vulnerability that allows for elevation of privilege when Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 fail to properly validate vSMB packet data.

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code remotely over a network.

A use after free vulnerability in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

Remote code execution vulnerability in Windows Hyper-V. An attacker could exploit this flaw to execute arbitrary code on the host.