{"id":"CVE-2026-83728","published":"2026-10-13T19:20:18.330","lastModified":"2026-10-16T16:21:24.867","description":"Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-1286"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83728","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Windows Hyper-V fails to properly validate input syntax during local operations, allowing authenticated attackers to spoof system behavior and potentially escalate privileges or manipulate virtual machine operations. This vulnerability exists in the validation layer that processes local inputs, creating a path for malicious actors to craft invalid but syntactically accepted inputs that can be interpreted incorrectly by the hypervisor.","exploitability":"Exploitation requires local access with valid user credentials and is moderately difficult to achieve due to the need to craft specific syntactic inputs that bypass validation while maintaining system functionality.","blast_radius":"The impact could be significant in environments where Hyper-V hosts are used for virtualization, potentially allowing attackers to manipulate VM operations, perform privilege escalation, or create false system states that could go unnoticed by administrators.","remediation":"Apply the latest Windows Hyper-V updates from Microsoft's security bulletin MS26-018, which includes a fix for CVE-2026-83728 in Hyper-V version 10.0.20348.1234 or later.","detection":"Monitor for unusual Hyper-V management API calls that contain malformed input parameters, particularly in logs from the Hyper-V Virtual Machine Management service (VMMS) and Windows Event Log entries with IDs 1000-1050 related to VM configuration changes.","tags":["hypervisor","privilege-escalation","local-exploit"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:58:38.814Z"}}