CVE-2026-102214

CVE-2026-102214 is a use-after-free (CWE-416) in Windows Hyper-V. An attacker who is already authorized with low local privileges can trigger the flaw without user interaction and execute code on the host. Successful exploitation yields high impact to confidentiality, integrity, and availability, and the CVSS scope is changed, so the effect can extend beyond the vulnerable Hyper-V component. Windows systems running Hyper-V are affected; exact build ranges were not included in the source data. It is not listed in CISA KEV, and no public proof-of-concept is known.

What to do: Apply the October 2026 Microsoft security updates that cover Windows Hyper-V as soon as they are available for your builds. Until hosts are patched, limit local logon to trusted administrators and treat Hyper-V hosts as high-value systems. No public exploit or CISA KEV listing is known, but the issue is high severity with scope change, so patching should not wait on proof-of-concept code.