CVE-2026-21244
HIGHCVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
2Tags
Description
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Analysis
Heap overflow in Windows Hyper-V enables authenticated local users to achieve arbitrary code execution with high privileges (CVSS 7.3). Exploitation requires user interaction and local system access, affecting Windows 10 1809 and Windows Server 2025. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Inventory all Hyper-V deployments and identify systems requiring patching; restrict administrative access to Hyper-V hosts through credential reviews and MFA enforcement. Within 7 days: Implement network segmentation to isolate Hyper-V management interfaces; monitor privileged account activity for suspicious Hyper-V access patterns. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today