Microsoft Windows Hyper-V Heap-Based Buffer Overflow Vulnerability Allowing Local Remote Code Execution

A heap-based buffer overflow vulnerability has been identified in Windows Hyper-V. This vulnerability allows an authorized attacker to execute code locally. It affects multiple Windows versions, including Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022. The vulnerability arises from a buffer overflow in the Hyper-V component, which can be exploited by an attacker with access to the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5075904, KB5075912, KB5075999, KB5075906, KB5077181, KB5077212, and KB5075941.