CVE-2026-113753: Windows Hyper-V Elevation of Privilege Vulnerability

Q: What level of access does an attacker need?

The attacker must already be authorized on the affected system and have high privileges. The attack is local and does not require user interaction.

Q: Is this exposed through network access alone?

No. The attack vector is local, so network-only access is not sufficient based on the provided information.

Q: Which software is identified as affected?

The provided data identifies Microsoft Windows 11. It does not provide affected build numbers, Hyper-V configuration details, or fixed versions.

Published Nov 10, 2026

Updated

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Other sources

Windows Hyper-V Elevation of Privilege Vulnerability

— Microsoft

Affected Software

2 affected componentsFixes available

Microsoft Windows 11=26H1, >=10.0.28000<10.0.28000.3501

10.0.28000.3501

Microsoft Windows 11=26H1, >=10.0.28000<10.0.28000.3501

10.0.28000.3501

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3501Patch KB5132059

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·06:18 PM

Data Sourced

via MITRE·06:18 PM

DescriptionSeverity

Data Sourced

via NVD·07:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need?

The attacker must already be authorized on the affected system and have high privileges. The attack is local and does not require user interaction.

Is this exposed through network access alone?

No. The attack vector is local, so network-only access is not sufficient based on the provided information.

Which software is identified as affected?

The provided data identifies Microsoft Windows 11. It does not provide affected build numbers, Hyper-V configuration details, or fixed versions.

CVE-2026-113753: Windows Hyper-V Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need?

Is this exposed through network access alone?

Which software is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

Is this exposed through network access alone?

Which software is identified as affected?