CVE-2026-50485: Microsoft Hyper-V buffer over-read denial of service

CVE-2026-50485 · Severity: medium · CVSS 4.5 · Published 2026-07-14

A vulnerability in Microsoft Hyper-V, the software used to create and manage virtual machines, could allow an authorized user to cause a system crash or service outage. To exploit this, an attacker must already have high-level permissions and be located on the same local network as the target system. While this does not allow for data theft, it can disrupt business operations by taking critical virtualized servers offline.

Technologies: Microsoft Hyper-V, Microsoft Windows 11, Microsoft Windows 10, Microsoft Windows Server 2012. Vendors: Microsoft.

Quick answers

Is CVE-2026-50485 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-50485 being exploited in the wild.
How severe is CVE-2026-50485?
Medium severity, with a CVSS score of 4.5, published 14 July 2026.
Which products and versions are affected?
Microsoft Hyper-V All versions on affected Windows OS; Microsoft Windows 11 24H2, 25H2, 26H1; Microsoft Windows 10 1607, 1809, 21H2, 22H2; Microsoft Windows Server 2012 All editions.
Is there a fix for CVE-2026-50485?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-50485 attacked?
It is attacked from the adjacent network, in an operating system.
Am I affected by CVE-2026-50485?
Check whether you run Microsoft Hyper-V, Microsoft Windows 11, Microsoft Windows 10 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A buffer over-read vulnerability (CWE-126) exists in Microsoft Hyper-V. The flaw is triggered when the system attempts to read data beyond the boundaries of an allocated buffer, leading to a crash of the host or the virtualization service. Exploitation requires the attacker to have high privileges (PR:H) and be positioned on an adjacent network (AV:A), such as the same local subnet or logical link. Successful exploitation results in a denial-of-service (DoS) but does not provide a path for information disclosure or code execution. Microsoft has released security updates to address this issue across various Windows and Windows Server versions.

Affected products

  • Microsoft Windows 10 1607, 1809, 21H2, 22H2
  • Microsoft Windows 11 24H2, 25H2, 26H1
  • Microsoft Windows Server 2012 All editions
  • Microsoft Hyper-V All versions on affected Windows OS

Timeline

  • 2026-07-14: disclosed: Initial disclosure by Microsoft
  • 2026-07-14: advisory: NVD record published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.