CVE-2026-80083: CWE-822: Untrusted Pointer Dereference in Microsoft Windows 11 version 23H2

CVE-2026-80083 is a vulnerability classified under CWE-822 (Untrusted Pointer Dereference) affecting Windows Hyper-V in Windows 11 version 23H2. The flaw permits an authorized local attacker to execute arbitrary code by exploiting improper handling of pointers within the Hyper-V virtualization component. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with impacts including confidentiality, integrity, and availability. Multiple affected Windows 11 builds are identified, with patches released by Microsoft to remediate the issue.

An authorized attacker with local privileges can exploit this vulnerability to execute arbitrary code on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the system. This could allow the attacker to run malicious code with elevated privileges within the Hyper-V environment.

Microsoft has released official patches addressing this vulnerability. Users and administrators should apply the updates provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80083 to remediate the issue. No additional mitigation steps are indicated by the vendor.