Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
CWE-290