Summary
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
To exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code.
According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
An attacker on a nested guest VM who successfully exploited the vulnerability could escape their VM and gain admin privilege on the guest that is serving as the host.
For diagrams and more detailed information about nested VMs please see Run Hyper-V in a Virtual Machine with Nested Virtualization.
Security updates
10.0.19044.7807 — https://support.microsoft.com/help/5126657
10.0.20348.5761 — https://support.microsoft.com/help/5126655
10.0.22631.7652 — https://support.microsoft.com/help/5126653
10.0.26100.9711 — https://support.microsoft.com/help/5127648
10.0.26100.33650 — https://support.microsoft.com/help/5126646
10.0.28000.3231 — https://support.microsoft.com/help/5127646
Vulnerabilities 1
-
High 8.8
Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105733
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss