{"id":"CVE-2026-83716","published":"2026-10-13T19:20:16.243","lastModified":"2026-10-16T16:21:23.040","description":"Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83716","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Hyper-V allows an authenticated attacker to execute arbitrary code on the host system with elevated privileges. This vulnerability arises from insufficient bounds checking when processing Hyper-V virtual machine configurations, potentially enabling attackers to escalate their privileges and compromise the entire virtualization environment.","exploitability":"Exploitation requires local authentication to a Hyper-V-enabled system with appropriate permissions, making it moderately difficult but achievable through credential compromise or privilege escalation attacks.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control over the Hyper-V host system, potentially affecting all virtual machines running on that host and enabling lateral movement throughout the network infrastructure.","remediation":"Apply the Windows update KB5042186 or later, which includes the patch for this vulnerability in Hyper-V components.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","hypervisor","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:58:23.384Z"}}