Type Vulnerability
Null pointer dereference in Windows Hyper-V allows an authorised attacker to deny service locally.
Windows Hyper-V Denial of Service Vulnerability
CVE-2026-96965
What this means
This is rated medium severity (5.3 out of 10). There is no confirmed exploitation of it yet.
Full vendor description
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
Scoring and exploitation
5.3/ 10
CVSS 3.1 base scoreMedium
Exploitable only with local access and an administrator-level account, under specific conditions, and no one has to click or open anything. High impact on availability, and it can reach beyond the vulnerable system.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Exploitability
Longer bar: easier to attack
Attack vectorLocalAV:L
Attack complexityHighAC:H
Privileges requiredHighPR:H
User interactionNoneUI:N
ScopeChangedS:C
Impact
Longer bar: more harm
ConfidentialityNoneC:N
IntegrityNoneI:N
AvailabilityHighA:H
- Not reported
- Exploited in the wild
- Not confirmed in the
- Not reported
Weaknesses
CWE-476
References
1 link from the CVE record, grouped by site.
msrc.microsoft.com1 link