CVE-2026-83716
HighCVSS 8.8Summary
A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Risk Assessment
This flaw enables an attacker with valid credentials to execute arbitrary code, potentially leading to compromise of the host or virtual machines.
Recommendation
Install security updates for Windows Hyper-V and restrict virtualization features to trusted administrators.
Other vulnerabilities in Windows Hyper-V
See all- CVE-2026-96223High
A use-after-free vulnerability in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-88071High
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-87705High
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
- CVE-2026-85369High
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-85343High
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-83931High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-83839High
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-83728High
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
- CVE-2026-70023High
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2017-8714High
The Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1607, and Windows Server 2016 has a vulnerability allowing remote code execution when it fails to properly validate input from an authenticated user on a guest operating system.
Original NVD description (English source)
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS