PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-45607 Microsoft CVE debrief

CVE-2026-45607 is a HIGH severity vulnerability in Windows Hyper-V that allows an unauthorized attacker to execute code locally. The vulnerability has a CVSS score of 8.4 and was published on 2026-06-09T17:17:29.563Z. The vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server.

Vendor
Microsoft
Product
Windows Hyper-V
CVSS
HIGH 8.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-11
Advisory published
2026-06-09
Advisory updated
2026-06-11

Who should care

Administrators and users of Windows Hyper-V are advised to review and apply the necessary patches to mitigate this vulnerability.

Technical summary

The vulnerability is an out-of-bounds read in Windows Hyper-V that allows an unauthorized attacker to execute code locally. The vulnerability has been assigned a CVSS vector of CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Defensive priority

HIGH

Recommended defensive actions

  • Apply the necessary patches from Microsoft to mitigate this vulnerability. Refer to [ref-4](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45607) for more information.

Evidence notes

The vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server. Refer to the [NVD detail page](https://nvd.nist.gov/vuln/detail/CVE-2026-45607) for a full list of affected versions.

Official resources

CVE-2026-45607 was published on 2026-06-09T17:17:29.563Z and modified on 2026-06-11T18:37:21.443Z.