Windows Hyper-V vulnerabilities
25 known CVE vulnerabilities in Windows Hyper-V, translated and rated.
- CVE-2017-8714High
The Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1607, and Windows Server 2016 has a vulnerability allowing remote code execution when it fails to properly validate input from an authenticated user on a guest operating system.
- CVE-2017-8664High
A vulnerability in Windows Hyper-V allows remote code execution when the system fails to properly validate input from a privileged user on a guest operating system.
- CVE-2017-0193High
A vulnerability in Windows Hyper-V allows an attacker to gain elevated privileges on a target guest operating system when Hyper-V instruction emulation fails to properly enforce privilege levels.
- CVE-2017-0212High
Windows Hyper-V contains a vulnerability that allows for elevation of privilege when Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 fail to properly validate vSMB packet data.
- CVE-2026-40402Critical
A use after free vulnerability in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
- CVE-2021-26867Critical
Remote code execution vulnerability in Windows Hyper-V. An attacker could exploit this flaw to execute arbitrary code on the host.
- CVE-2026-61368Medium
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
- CVE-2026-50680High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-50485Medium
In Windows Hyper-V, a buffer over-read vulnerability allows an authorized attacker to cause a denial of service (DoS) over an adjacent network.
- CVE-2026-54129High
A use-after-free vulnerability exists in Windows Hyper-V. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-54127High
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-47652High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-45641High
A type confusion vulnerability in Windows Hyper-V allows an unauthorized attacker to execute code locally.
- CVE-2026-45607High
Out-of-bounds read vulnerability in Windows Hyper-V allows an unauthorized attacker to execute code locally.
- CVE-2026-42972Medium
Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally.
- CVE-2026-20825Medium
An improper access control vulnerability in Windows Hyper-V allows an authorized attacker to disclose information locally.
- CVE-2024-38235Medium
A vulnerability in Windows Hyper-V allows a denial of service (DoS) attack. An attacker could exploit this flaw to disrupt the service.
- CVE-2024-20684Medium
Denial of Service vulnerability in Windows Hyper-V. An attacker can cause failure or unavailability of virtualization services.
- CVE-2023-36908Medium
A vulnerability in Windows Hyper-V allows for information disclosure, potentially leading to unauthorized access to data.
- CVE-2022-38015Medium
A vulnerability in Windows Hyper-V allows an attacker to perform a Denial of Service attack.
- CVE-2021-42284Medium
A Denial of Service vulnerability in Windows Hyper-V. An attacker could exploit this to cause crashes or unavailability of virtualization services.
- CVE-2021-42274Medium
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability.
- CVE-2021-34450High
Remote code execution vulnerability in Windows Hyper-V. An attacker could exploit this flaw to execute code on the Hyper-V host.
- CVE-2021-33758High
A vulnerability in Windows Hyper-V allows denial of service (DoS).
- CVE-2021-33755Medium
Denial of service vulnerability in Windows Hyper-V. Could allow disruption of virtualization services.

