Microsoft Windows Hyper-V Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in Windows Hyper-V. This vulnerability allows an authorized attacker to execute code locally. It affects multiple Windows products, including various versions of Windows Server, Windows 10, and Windows 11. The vulnerability arises from a buffer overflow in the Hyper-V component, which can be exploited by an attacker with access to the local machine.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can apply the security update KB5075999 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2025, the Security Hotpatch Update KB5075942 can also be applied. Windows 11 users can download the Security Hotpatch Update KB5077212.