CVE-2026-25170

{"id": "CVE-2026-25170", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.0, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.0}]}, "published": "2026-03-10T18:18:31.070", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25170", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally."}, {"lang": "es", "value": "Uso despu\u00e9s de liberar en Windows Hyper-V permite a un atacante autorizado elevar privilegios localmente."}], "lastModified": "2026-03-13T18:48:46.540", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "E8B076BC-42F9-4972-BE73-3874E694CD3A", "versionEndExcluding": "10.0.22631.6783"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "6E98A971-B530-4289-B7B2-8403BD2DAD07", "versionEndExcluding": "10.0.22631.6783"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "3381C469-C150-4724-8A53-E11794797D9F", "versionEndExcluding": "10.0.26100.7979"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "6F1A77F2-59BC-4F92-81A0-2A4E8981FEFB", "versionEndExcluding": "10.0.26100.7979"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "58F3AA3B-9960-48F9-B013-8CF6BA09893C", "versionEndExcluding": "10.0.26200.7979"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "F113DAFC-91E5-42C1-A2C3-B9C9286D240B", "versionEndExcluding": "10.0.26200.7979"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "30606CC6-21D2-4EAC-B568-DABA2786EC61", "versionEndExcluding": "10.0.28000.1719"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "62E818F7-1053-4CD2-9CCE-EF84D3FA7861", "versionEndExcluding": "10.0.28000.1719"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C037CFF5-1294-4724-A28C-42B72A7F0B2E", "versionEndExcluding": "10.0.20348.4830"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A3C9232-BEAB-4D6B-B465-4C4643098054", "versionEndExcluding": "10.0.25398.2207"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "04014C9F-24B4-4A7A-B2E1-B80EFB7F6D4E", "versionEndExcluding": "10.0.26100.32463"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}