NetSight
high7.0

CVE-2026-25170

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Impact

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 11 23h2
before 10.0.22631.6783
MicrosoftWindows 11 24h2
before 10.0.26100.7979
MicrosoftWindows 11 25h2
before 10.0.26200.7979
MicrosoftWindows 11 26h1
before 10.0.28000.1719
MicrosoftWindows Server 2022
before 10.0.20348.4830
MicrosoftWindows Server 2022 23h2
before 10.0.25398.2207
MicrosoftWindows Server 2025
before 10.0.26100.32463

Weakness classification

References