Hyper-V vulnerabilities and fixes

CVEs that mention Hyper-V, ranked by priority. 18 tracked.

Hyper-V has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-10-13. Highest priority: CVE-2026-102214 (score 44/100).

• CVE-2026-102214 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
• CVE-2026-105733 HIGH 8.8 Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
• CVE-2026-97813 MEDIUM 6.5 UPGRADE UPGRADE Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a net
• CVE-2026-83716 HIGH 8.8 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
• CVE-2026-83728 HIGH 8.8 Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perf
• CVE-2026-70023 HIGH 7.8 UPGRADE UPGRADE Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
• CVE-2026-85343 HIGH 7.8 Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacke
• CVE-2026-85369 HIGH 8.2 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
• CVE-2026-87705 HIGH 7.4 Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker
• CVE-2026-108399 HIGH 7.2 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
• CVE-2026-83671 MEDIUM 6.5 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
• CVE-2026-83931 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
• CVE-2026-88071 HIGH 7.8 UPGRADE UPGRADE Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
• CVE-2026-96223 HIGH 7.8 UPGRADE UPGRADE Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
• CVE-2026-70248 MEDIUM 6.5 Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
• CVE-2026-83636 MEDIUM 6.5 Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
• CVE-2026-83839 HIGH 7.0 Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate
• CVE-2026-83766 MEDIUM 4.2 Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an

FAQ

How do I fix Hyper-V vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Hyper-V being exploited right now?

None of the tracked Hyper-V CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Hyper-V CVE should I patch first?

CVE-2026-102214 currently ranks highest (44/100): Use after free in Windows Hyper-V allows an authorized attacker to execute code locally..

← Back to latest CVEs