CVE-2026-87705

Published: Oct 13, 2026Modified: Oct 16, 2026

7.4

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 4.0

Source: secure@microsoft.com (Secondary)

Description

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

Related CWEs

CWE-940

Improper Verification of Source of a Communication Channel

The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87705

Source: secure@microsoft.com

Timeline

No history available yet.