{"id":"CVE-2026-95910","kind":"vulnerability","aliases":["CVE-2026-95910"],"related":[],"title":"Windows Hyper-V: certificate validation flaw lets a local user bypass a security feature","description":"Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.","summary":"Windows Hyper-V does not properly validate certificates, so an authorized attacker on the machine can bypass a security feature. NVD rates it medium with a CVSS score of 6.7 and reports no known exploitation.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["hyper-v","infrastructure","windows"],"not_affected_if":["hyper-v-not-enabled","no-local-accounts-untrusted"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:44+00:00","first_seen_at":"2026-11-10T19:25:23+00:00","triaged_at":"2026-11-10T19:55:52+00:00","updated_at":"2026-11-10T19:55:52+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:55:52Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Hyper-V: certificate validation flaw lets a local user bypass a security feature","impact":"medium","summary":"Windows Hyper-V does not properly validate certificates, so an authorized attacker on the machine can bypass a security feature. NVD rates it medium with a CVSS score of 6.7 and reports no known exploitation.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","hyper-v"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local authorized user bypasses a Hyper-V security feature","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-95910 for affected Windows builds, the fixed update and the specific feature bypassed.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["hyper-v-not-enabled","no-local-accounts-untrusted"],"who_is_affected":"Only Windows systems with the Hyper-V role enabled are in scope, and the attacker must already have an authorized local account. The sources do not name affected Windows builds or the exact security feature bypassed. Hosts without Hyper-V can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000689,"input_tokens":4491,"output_tokens":480,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':17A,20A '-95910':18A,21A '6.7':57B 'allow':71C 'attack':39B,74C 'author':38B,73C 'bypass':12A,44B,76C 'certif':5A,35B,64C 'cve':16A,19A 'cvss':54B 'exploit':62B 'featur':15A,47B,79C 'flaw':7A 'hyper':3A,23B,29B,69C 'hyper-v':2A,22B,28B,68C 'improp':63C 'infrastructur':25B 'known':61B 'let':8A 'local':10A,80C 'machin':42B 'medium':51B 'nvd':48B 'proper':33B 'rate':49B 'report':59B 'score':55B 'secur':14A,46B,78C 'user':11A 'v':4A,24B,30B,70C 'valid':6A,34B,65C 'window':1A,26B,27B,67C","nicknames":[],"mitigations":[],"who_affected":"Only Windows systems with the Hyper-V role enabled are in scope, and the attacker must already have an authorized local account. The sources do not name affected Windows builds or the exact security feature bypassed. Hosts without Hyper-V can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["hyperv","infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-2026':17A,20A '-95910':18A,21A 'bypass':12A 'certif':5A 'cve':16A,19A 'featur':15A 'flaw':7A 'hyper':3A 'hyper-v':2A 'let':8A 'local':10A 'secur':14A 'user':11A 'v':4A 'valid':6A 'window':1A","search_b":"'6.7':57B 'attack':39B 'author':38B 'bypass':44B 'certif':35B 'cvss':54B 'exploit':62B 'featur':47B 'hyper':23B,29B 'hyper-v':22B,28B 'infrastructur':25B 'known':61B 'machin':42B 'medium':51B 'nvd':48B 'proper':33B 'rate':49B 'report':59B 'score':55B 'secur':46B 'v':24B,30B 'valid':34B 'window':26B,27B","search_c":"'allow':71C 'attack':74C 'author':73C 'bypass':76C 'certif':64C 'featur':79C 'hyper':69C 'hyper-v':68C 'improp':63C 'local':80C 'secur':78C 'v':70C 'valid':65C 'window':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:44+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95910","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95910","severity":null,"published_at":"2026-11-10T19:21:44+00:00","modified_at":"2026-11-10T19:21:44+00:00","first_seen_at":"2026-11-10T19:25:23+00:00","fetched_at":"2026-11-10T19:25:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}