The reported defect is an incorrect authorization check in the Windows Hyper‑V hypervisor that permits an authorized user to override a defensive boundary over an adjacent network connection. The flaw effectively allows a user who already possesses sufficient local privileges to bypass a security feature, potentially increasing the privileges of the virtual machine instance or violating isolation guarantees. The impact is therefore a non‑confidentiality or non‑integrity effect, enabling exploitation of a specific virtualization security measure rather than broad system compromise.

Microsoft Windows 10 in the 1607, 1809, 21H2, and 22H2 editions; Microsoft Windows 11 in the 23H2, 24H2, 25H2, 26H2, 23H2, and 26H1 releases; Microsoft Windows Server 2016, Server 2019, Server 2022, and Server 2025, including all core installations. The vulnerability is confined to these listed product releases and their respective architectures as enumerated by the CNA.

The CVSS score of 4.2 indicates low overall severity. No EPSS score is published and the vulnerability is not present in the CISA Known Exploited Vulnerabilities catalog, which suggests that no public exploit is known. Attackers must already have an authorized presence on the same host or be able to connect over an adjacent network segment, and then require the ability to trigger the bypass of the security feature. Given the low severity scoring, the risk to the environment is limited but still exists for organizations that rely on Hyper‑V isolation to protect virtual workloads.