CVE-2026-97813: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1809

This vulnerability is a heap-based buffer overflow in the Windows Hyper-V component of Microsoft Windows 10 Version 1809 and several related builds. It enables an authorized attacker with network access to cause information disclosure. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality impact without integrity or availability impact. Microsoft has published an official fix for this vulnerability.

An authorized attacker can exploit this heap-based buffer overflow over the network to disclose sensitive information. There is no impact on system integrity or availability. The vulnerability affects confidentiality only.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97813 to remediate this vulnerability.