Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

How could an attacker exploit this vulnerability?
A remote code execution vulnerability exists when a VM guest fails to properly handle communication on a VMBus channel. To exploit the vulnerability, an authenticated attacker could send a specially crafted communication on the VMBus channel from the guest VM to the Host. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.
If the guest VM is running nested VMs, then this machine becomes a host and is vulnerable to CVE-2021-26443 and the update will need to be applied to mitigate this vulnerability. If the Guest VM is not running nested VMs then the Guest VM is not vulnerable to CVE-2021-26443.
** Is my system at risk to CVE-2021-26443 if Hyper-V is not enabled?**
No.

Security updates
10.0.17763.2300 — https://support.microsoft.com/help/5007206
10.0.18363.1916 — https://support.microsoft.com/help/5007189
10.0.19043.1348 — https://support.microsoft.com/help/5007186
10.0.20348.350 — https://support.microsoft.com/help/5007205
10.0.22000.318 — https://support.microsoft.com/help/5007215