Summary
Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could potentially gain elevated privileges on the host system beyond the guest virtual machine boundary.
How could an attacker exploit the vulnerability?
An attacker could exploit this vulnerability by running code in a guest virtual machine and sending a specially crafted network-related request to the host through the Hyper-V Virtual Switch. Under certain conditions, the request could cause the host to access memory that is no longer valid, potentially resulting in a denial of service or, in more severe cases, elevated privileges on the host system.
Security updates
10.0.17763.9020 — https://support.microsoft.com/help/5099538
10.0.20348.5386 — https://support.microsoft.com/help/5099540
10.0.19044.7548 — https://support.microsoft.com/help/5099539
10.0.26100.33158 — https://support.microsoft.com/help/5099536
10.0.26200.8875 — https://support.microsoft.com/help/5101650
10.0.28000.2525 — https://support.microsoft.com/help/5101649
10.0.14393.9339 — https://support.microsoft.com/help/5099535
6.2.9200.26226 — https://support.microsoft.com/help/5099445
6.3.9600.23291 — https://support.microsoft.com/help/5099444
Vulnerabilities 1
-
Critical 9.9
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57092
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss