Microsoft Security Response Center Follow CVE-2026-3842 Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3842 msrc.microsoft.com
