9.3
Critical
CVE-2026-40402 Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally
Description
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 11 version 22H3 10.0 | 10.0.22631.0 → < 10.0.22631.7079 | 10.0.22631.7079 |
| Windows 11 Version 23H2 10.0 | 10.0.22631.0 → < 10.0.22631.7219 | 10.0.22631.7219 |
| Windows Server 2022 10.0 | 10.0.20348.0 → < 10.0.20348.5139 | 10.0.20348.5139 |
References
- Windows Hyper-V Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows 11 version 22H3
The 1557 CVEs of Windows 11 version 22H3 →
CVE-2026-41097
Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security…
6.7
Medium
CVE-2026-40413
Windows TCP/IP Denial of Service Vulnerability
7.4
High
CVE-2026-40403
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally
8.8
High
CVE-2026-40401
Windows TCP/IP Denial of Service Vulnerability
7.1
High