Guest-to-host code execution via incompatible resource type

Type confusion in Microsoft Windows Hyper-V allows local users in a guest VM to execute code on the virtualization host. Hyper-V accesses a resource using an incompatible type, but Microsoft has not disclosed the affected handler or how untrusted input selects that resource. The attacker must obtain execution inside a guest VM; no user interaction is required, and successful exploitation crosses the virtualization boundary.