CVE-2026-85369
HighCVSS 8.2Summary
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials can exploit this flaw to gain higher privileges on the system, potentially leading to control over data and configuration.
Recommendation
Install the available Microsoft security updates for Windows as soon as possible and restrict local access to trusted users.
Other vulnerabilities in Windows Hyper-V
See all- CVE-2026-96223High
A use-after-free vulnerability in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-88071High
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-87705High
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
- CVE-2026-85343High
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-83931High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-83839High
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-83728High
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
- CVE-2026-83716High
A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-70023High
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-108399High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS