Skip to content
OpenAdvisories
Critical MSRC-CVE-2026-57092 1 CVE

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Published Jul 14, 2026 · Updated Jul 14, 2026

Summary

Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could potentially gain elevated privileges on the host system beyond the guest virtual machine boundary.

How could an attacker exploit the vulnerability?
An attacker could exploit this vulnerability by running code in a guest virtual machine and sending a specially crafted network-related request to the host through the Hyper-V Virtual Switch. Under certain conditions, the request could cause the host to access memory that is no longer valid, potentially resulting in a denial of service or, in more severe cases, elevated privileges on the host system.

Security updates
10.0.17763.9020 — https://support.microsoft.com/help/5099538
10.0.20348.5386 — https://support.microsoft.com/help/5099540
10.0.19044.7548 — https://support.microsoft.com/help/5099539
10.0.26100.33158 — https://support.microsoft.com/help/5099536
10.0.26200.8875 — https://support.microsoft.com/help/5101650
10.0.28000.2525 — https://support.microsoft.com/help/5101649
10.0.14393.9339 — https://support.microsoft.com/help/5099535
6.2.9200.26226 — https://support.microsoft.com/help/5099445
6.3.9600.23291 — https://support.microsoft.com/help/5099444

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References