EUVD-2026-35517
GHSA-6j5p-j4fx-r97w
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain admin in guest VM
-
DeliveryCraft malicious VMBus/synthetic device request
-
ExploitTrigger heap out-of-bounds read in Hyper-V
-
ExecutionCorrupt host-partition memory state
-
PersistExecute code in root partition
-
ImpactEscape VM isolation and pivot to co-tenants
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Heap buffer bounds checking
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the Hyper-V role or Hyper-V Platform feature to be enabled on the target Windows or Windows Server host, plus local access with high privileges (CVSS PR:H) - most plausibly administrative access within a guest VM. The attack does not require user interaction (UI:N), so no operator action on the host console is needed once the attacker has the prerequisite guest-admin foothold. Note the description's wording 'unauthorized attacker' conflicts with the CVSS PR:H requirement - Microsoft's MSRC entry should be consulted to confirm whether 'unauthorized' refers to lacking host privileges while still requiring guest privileges. Single-tenant hosts where guest administrators are already trusted face substantially reduced realistic risk. |
| Impact | The CVSS vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H paints a nuanced picture: local attack vector with high privileges required limits casual exploitation, but the scope change combined with high impact across CIA triad signals a hypervisor escape - historically the most consequential class of Hyper-V bugs. No EPSS, KEV, or POC data was provided, so exploitation probability cannot be quantitatively assessed, but Microsoft's classification of these issues as remote code execution despite an AV:L vector typically reflects a guest VM (with admin in guest) breaking into the host. This is a high-priority patch for multi-tenant virtualization environments (Azure, hosted VDI, server consolidation) where guest administrators are untrusted, but lower priority for single-tenant hosts where the attacker would already need host admin. Note: the description says 'unauthorized attacker' which conflicts with PR:H in the vector - verify with Microsoft whether the privilege requirement applies within a guest VM versus the host. |
| Exploit ScenarioDerived | An attacker who has obtained administrative privileges inside a guest VM (for example, via a tenant account on a hosted virtualization platform or through prior compromise of a guest OS) issues crafted synthetic device or VMBus operations that trigger the out-of-bounds read in the Hyper-V stack. The resulting memory disclosure or corruption is chained to execute code in the host partition, escaping VM isolation and gaining control over co-located tenants. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jun 09, 2026
Local code execution in Microsoft Windows Hyper-V stems from an out-of-bounds read condition (CWE-122 heap-based buffer overflow) that an attacker with high privileges on a guest or host context can leverage to break confidentiality, integrity, and availability boundaries. The CVSS 8.2 score is elevated by a scope change (S:C), indicating the flaw enables crossing the hypervisor isolation boundary. No public exploit identified at time of analysis, and the vulnerability is not currently listed in CISA KEV.
RemediationAI
Patch available per vendor advisory - consult the Microsoft Security Update Guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47652 for the exact KB articles and cumulative update versions that apply to each affected Windows and Windows Server release, then deploy via Windows Update, WSUS, or Microsoft Update Catalog as appropriate for your patching cadence. As a compensating control where patching must be delayed, restrict which principals hold administrator rights inside guest VMs and on the host (since PR:H is required), and on multi-tenant hosts consider temporarily migrating sensitive workloads onto dedicated hosts to reduce blast radius from a hypothetical guest escape - the trade-off is operational overhead and potential service disruption during live migration. Disabling Hyper-V is not a practical workaround for hosts whose primary function is virtualization.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 13 packages in microsoft, euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Hyper-V is Microsoft's Type-1 hypervisor that partitions hardware into isolated virtual machines, with the host (root partition) managing guest (child) partitions through VMBus and synthetic device interfaces. The CWE-122 classification points to a heap-based buffer overflow, specifically an out-of-bounds read where the hypervisor or a VM worker process reads beyond an allocated heap buffer. Such flaws in Hyper-V commonly arise in synthetic device emulation, VMBus message parsing, or memory management code paths where guest-controlled data influences buffer offsets, which combined with the scope change (S:C) in the CVSS vector strongly suggests the bug enables guest-to-host or cross-partition impact.
Know when Windows 11 23h2 gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
2DescriptionCVE.org
Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.
Executive ViewAI
Microsoft Windows Hyper-V contains a local code execution vulnerability (CVE-2026-47652, CVSS 8.2) that enables privilege escalation across virtual machine isolation boundaries, posing a direct threat to virtualization infrastructure security. Organizations running Hyper-V environments face immediate risk to workload separation and system confidentiality, with no vendor patch currently available.
Enforce principle of least privilege by restricting administrative account creation on Hyper-V guests; enable detailed audit logging on Hyper-V hosts and implement alerting for privilege escalation attempts; enforce multi-factor authentication for host administrative access; implement network segmentation isolating Hyper-V infrastructure; deploy host-based endpoint detection and response (EDR) with kernel-level monitoring; continue monitoring vendor advisories for patch release.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
A heap overflow occurs when a program writes data beyond the bounds of a buffer allocated in the heap memory region.
Related Vulnerabilities in Windows Hyper-V Out-of-Bounds Read Code Execution
View all 3More in Windows 11 23h2
View allInternet Shortcut Files Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is rem
Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR
Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables
Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker
Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack co
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update
Active Directory Domain Services contains an elevation of privilege vulnerability that allows authenticated domain users
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l
Windows MSHTML Platform Spoofing Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitab
Microsoft Scripting Engine contains a type confusion vulnerability allowing unauthorized remote code execution over the
Windows Task Scheduler Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low a
Command injection in the Windows Shell lets remote, unauthenticated attackers bypass a Windows security feature and then
Exploit-DB