CVE-2026-21255 Windows Hyper

Back Api.Msrc.Microsoft

CVE-2026-21255 Windows Hyper

Api.Msrc.Microsoft • February 10, 2026

Share: View original

Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in Windows Hyper-V On February 10, 2026, Microsoft published multiple CVEs related to vulnerabilities in Windows Hyper-V. These include heap-based buffer overflows and improper input validation that allow authorized attackers to execute code locally, as well as an improper access control vulnerability that permits bypassing security features. Additionally, a previously reported CVE from November 11, 2025, involved an out-of-bounds read that could disclose information locally. 7 sources 30

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)