EIP-2026-115408

This exploit demonstrates a heap-based buffer overflow in the RNDIS (Remote Network Driver Interface Specification) handling of the OID_802_3_MULTICAST_LIST request in Windows Hyper-V. The vulnerability arises from an integer division flaw that allows an attacker to overflow a buffer by 1 to 5 bytes, potentially leading to remote code execution in the host's kernel context.