Product:
Windows Hyper-V
Summary
Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally. This vulnerability can lead to significant confidentiality breaches if exploited. Attackers with high privileges can access sensitive information without proper authorization.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2026-20825 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges on the local system. By leveraging improper access controls, the attacker can disclose sensitive information stored within the Hyper-V environment. This requires local access to the system, making it essential for attackers to gain physical or remote access to the machine.
Affected Products
- Windows Hyper-V: A virtualization technology that allows users to create and manage virtual machines on Windows servers.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting access to Hyper-V and ensuring that only authorized users have high privileges can help reduce the risk of exploitation.