Product:
Windows Hyper-V
Summary
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks, including unauthorized access to sensitive information and system control. It is classified as critical due to its high impact on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.3 | CVE-2026-40402 |
Exploitation
An attacker can exploit this vulnerability by executing a specially crafted application on a local system. Since the attack complexity is low and no user interaction is required, an unauthorized user can gain elevated privileges without needing additional permissions. This makes the vulnerability particularly dangerous in environments where multiple users have access to the same system.
Affected Products
- Windows Hyper-V: A virtualization technology that allows users to create and manage virtual machines on Windows servers.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring for unusual activity can help reduce the risk of exploitation. Additionally, implementing strict access controls can limit the potential impact of this vulnerability.