# CVE-2026-113753

Local privilege escalation in Windows Hyper-V via untrusted pointer dereference

- Page: https://www.vulneraibility.com/cve/CVE-2026-113753
- CVSS: 8.2
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.36% (percentile 29.7)
- CISA SSVC: exploitation none, automatable no, technical impact total (assessed 2026-11-10)
- Weakness: CWE-822
- Published: 2026-11-10

## Affected versions

- Microsoft Windows 11 version 26H1: affected >= 10.0.28000.0 and < 10.0.28000.3501

A version outside these ranges is not a statement that it is unaffected.

## Impact

Local authorized attacker can elevate to SYSTEM on Hyper-V host, enabling host compromise, VM escape, and lateral movement.

## Action

Immediate action required

## Recommendation

Install Microsoft Hyper-V security update immediately and restrict local access until patched.

## References

- [patch] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113753

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.