CVE-2026-83636

Awaiting Analysis Awaiting Analysis - Queue

Null pointer dereference in Windows Hyper-V

Publication date: 2026-10-13

Last updated on: 2026-10-16

Assigner: Microsoft Corporation

Description

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-83636

EUVD

EUVD-2026-99928

Affected Vendors & Products

Vendor	Product	Version / Range
Microsoft	Windows	10 Version 21H2 10.0.19044.0
Microsoft	Windows	10 Version 22H2 10.0.19045.0
Microsoft	Windows	11 version 23H2 10.0.22631.0
Microsoft	Windows	11 Version 23H2 10.0.22631.0
Microsoft	Windows	11 Version 24H2 10.0.26100.0
Microsoft	Windows	11 Version 25H2 10.0.26200.0
Microsoft	Windows	11 version 26H1 10.0.28000.0
Microsoft	Windows	11 Version 26H2 10.0.26300.0
Microsoft	Windows	Server 2022 10.0.20348.0
Microsoft	Windows	Server 2025 10.0.26100.0
Microsoft	Windows	Server 2025 (Server Core installation) 10.0.26100.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This is a null pointer dereference vulnerability in Windows Hyper-V. It allows an authorized attacker to cause a denial of service on the local system by exploiting a flaw where the system attempts to access a null pointer, crashing the service or system.

Impact Analysis

An attacker with local access could exploit this to crash the Hyper-V service or the entire system, leading to service disruption and potential data loss. It requires local access but no additional privileges beyond authorization.

Mitigation Strategies

Apply the latest Windows security updates from Microsoft Update to patch the Hyper-V null pointer dereference vulnerability.

Hi! I’m here to help you understand CVE-2026-83636. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70