CVE-2026-108399

Vendor

Microsoft

Product

windows

CVSS

7.2

EPSS

0.004 (p32)

Exposure class

Operating system, Hypervisor, Endpoint security

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   CVE NVD 18d ago

   Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

   Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

   CVSS 7.2 CVE-2026-108399 Microsoft
2. 38
   Advisory MSRC 18d ago

   CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability

   Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

   CVE-2026-108399 Microsoft
3. 32
   Talos research Talos 18d ago

   Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

   Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."

   Fix available CVE-2026-96951CVE-2026-70229CVE-2026-70571+57 more Microsoft Cisco