CVE-2025-60706 Windows Hyper

Api.Msrc.Microsoft • November 11, 2025

Share: View original

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in Windows Hyper-V On February 10, 2026, Microsoft published multiple CVEs related to vulnerabilities in Windows Hyper-V. These include heap-based buffer overflows and improper input validation that allow authorized attackers to execute code locally, as well as an improper access control vulnerability that permits bypassing security features. Additionally, a previously reported CVE from November 11, 2025, involved an out-of-bounds read that could disclose information locally. 7 sources 30

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)

Hyper-V Windows