What is the CVSS score of CVE-2026-32149?

CVE-2026-32149 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Microsoft are affected by CVE-2026-32149?

CVE-2026-32149 is a high-severity local privilege escalation in Windows Hyper-V that allows authenticated low-privilege users to gain system-level access, affecting Windows 10, Windows 11, and…. A patch is available.

How to fix or mitigate CVE-2026-32149?

Within 24 hours: Identify all systems running Hyper-V (Windows 10 versions 1607-22H2, Windows 11 versions 22H3-26H1, Windows Server 2016-2025) and categorize by criticality. Within 7 days: Test and deploy the vendor-released patch from Microsoft in a controlled environment; prioritize production Hyper-V hosts and servers hosting sensitive workloads. Within 30 days: Verify patch deployment across all affected systems and confirm Windows Update status; restrict low-privilege account access to Hyper-V management interfaces where operationally feasible.

Microsoft CVE-2026-32149

EUVD-2026-22534 HIGH

Improper Input Validation (CWE-20)

2026-04-14 microsoft

GHSA-rg3f-46g9-qwc9

Information Disclosure Microsoft

7.3

CVSS 3.1 · NVD

Temporal: 6.4

Severity by source

NVD PRIMARY

7.3 HIGH

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CIRCL (temporal)

6.4 MEDIUM

cvss

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 17, 2026 - 15:22 vuln.today

cvss_changed

Analysis Generated

Apr 14, 2026 - 19:32 vuln.today

EUVD ID Assigned

Apr 14, 2026 - 17:46 euvd

EUVD-2026-22534

Analysis Generated

Apr 14, 2026 - 17:46 vuln.today

Patch released

Apr 14, 2026 - 17:46 nvd

Patch available

CVE Published

Apr 14, 2026 - 16:58 nvd

HIGH 7.3

DescriptionCVE.org

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

AnalysisAI

Windows Hyper-V local privilege escalation via improper input validation (CWE-20) enables authenticated low-privilege attackers with user interaction to execute arbitrary code with high confidentiality, integrity, and availability impact across Windows 10 (versions 1607-22H2), Windows 11 (versions 22H3-26H1), and Windows Server (2016-2025). Microsoft released patches addressing the vulnerability with EPSS exploitation probability data not available; no public exploit identified at time of analys

Technical ContextAI

This vulnerability affects the Windows Hyper-V hypervisor, Microsoft's native virtualization platform enabling multiple virtual machines on Windows systems. The root cause is improper input validation (CWE-20), where the Hyper-V component fails to adequately sanitize or validate user-supplied input before processing. This input validation failure occurs at the local system level, likely in interfaces exposed to authenticated users on the host operating system. The vulnerability spans the entire modern Windows ecosystem from legacy Windows 10 Version 1607 (released 2016) through cutting-edge Windows 11 Version 26H1 and Windows Server 2025, affecting both desktop and server platforms including Server Core installations. The consistent CPE designation across versions indicates a systemic architectural flaw in Hyper-V's input handling mechanisms rather than version-specific implementation errors.

RemediationAI

Apply vendor-released patches immediately through Windows Update or Microsoft Update Catalog to upgrade affected systems to patched versions: Windows 10 Version 1607 to build 10.0.14393.9060 or later, Windows 10 Version 1809 to build 10.0.17763.8644 or later, Windows 10 Version 21H2 to build 10.0.19044.7184 or later, Windows 10 Version 22H2 to build 10.0.19045.7184 or later, Windows 11 Version 22H3/23H2 to build 10.0.22631.6936 or later, Windows 11 Version 24H2 to build 10.0.26100.32690 or later, Windows 11 Version 25H2 to build 10.0.26200.8246 or later, Windows 11 Version 26H1 to build 10.0.28000.1836 or later, Windows Server 2016 to build 10.0.14393.9060 or later, Windows Server 2019 to build 10.0.17763.8644 or later, Windows Server 2022 to build 10.0.20348.5020 or later, Windows Server 2022 23H2 Edition to build 10.0.25398.2274 or later, and Windows Server 2025 to build 10.0.26100.32690 or later. Detailed patching guidance and deployment packages available at the official Microsoft advisory (https://msrc.microsoft.com/update-guide/vulnerability/