EIP-2026-115408
PRE-CVEHyper-V - 'vmswitch.sys' VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-115408. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a heap-based buffer overflow in the RNDIS (Remote Network Driver Interface Specification) handling of the OID_802_3_MULTICAST_LIST request in Windows Hyper-V. The vulnerability arises from an integer division flaw that allows an attacker to overflow a buffer by 1 to 5 bytes, potentially leading to remote code execution in the host's kernel context.
Description
Hyper-V - 'vmswitch.sys' VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow
Exploits (1)
This exploit demonstrates a heap-based buffer overflow in the RNDIS (Remote Network Driver Interface Specification) handling of the OID_802_3_MULTICAST_LIST request in Windows Hyper-V. The vulnerability arises from an integer division flaw that allows an attacker to overflow a buffer by 1 to 5 bytes, potentially leading to remote code execution in the host's kernel context.