cve 2026-23670

Windows systems with particular consumer DDR4 or DDR5 modules can be pushed past Virtualization-based Security protections by a local administrator or malware that has already gained administrator rights, using a software-only attack that rewrites RAM configuration data and survives a reboot...

A new Microsoft security advisory for CVE-2026-23670 spotlights a Windows Virtualization-Based Security (VBS) security feature bypass vulnerability, and the wording matters as much as the CVE itself. Microsoft’s confidence metric is explicitly designed to communicate how certain it is that a...