CVE-2026-119826 · Infrastructure
NO FIX YET
A memory-handling bug in Windows Hyper-V lets a user who already has access to the machine escalate their privileges. The sources do not say which Windows builds are affected or what patch fixes it.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only Windows machines with the Hyper-V feature present are relevant, and the attacker needs an authorized local account first. The sources do not list affected builds, so the exact exposure is unknown. Systems without Hyper-V or with no untrusted local users are lower priority.
Not affected if hyper-v-not-enabled, no-untrusted-local-users
Who cares hyper-v, windows
winver and compare it against Microsoft's security update guide entry for CVE-2026-119826Get-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-VNo fix yet, per the sources.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.