Microsoft Windows Hyper-V Out-of-Bounds Read Vulnerability Leading to Local Remote Code Execution

A vulnerability allowing out-of-bounds read has been identified in Windows Hyper-V. This issue could enable an unauthorized attacker to execute code locally. The vulnerability affects multiple versions of Windows 10, Windows 11, Windows Server 2022, and Windows Server 2025. Exploitation would require an authenticated attacker on a guest virtual machine to send specially crafted file operation requests that could result in remote code execution on the host server.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the local host machine.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5095051, KB5094125, KB5094126, KB5093998, KB5094127, and KB5094128.