Lucene search
+L

121 matches found

BDU FSTEC
BDU FSTEC
•added 2022/02/10 12:00 a.m.•14 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...

4.6CVSS6.4AI score0.00664EPSS
SaveExploits0References3
OSV
OSV
•added 2022/01/25 2:15 p.m.•8 views

ALPINE-CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

4.6CVSS6.8AI score0.00352EPSS
SaveExploits0References1
OSV
OSV
•added 2022/01/25 2:15 p.m.•6 views

DEBIAN-CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

4.6CVSS5.8AI score0.00352EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/01/11 12:00 a.m.•6 views

PT-2022-1508 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Windows Hyper-V hardware virtualization system. It allows an attacker to elevate their privileges. Recommendations: At t...

9CVSS9.2AI score0.00928EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•6 views

PT-2021-2703 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient input validation in the Windows Hyper-V hardware virtualization system, which can be exploited by a remote attacker to cause a denial of service...

7.8CVSS7.1AI score0.03933EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/02/18 12:00 a.m.•17 views

Xen Security Vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen. The...

7.8CVSS7.1AI score0.00359EPSS
SaveExploits0References9
attackerkb
attackerkb
•added 2021/02/17 2:15 a.m.•6 views

CVE-2021-26932

An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the backend driver then...

5.5CVSS6.5AI score0.00346EPSS
SaveExploits0References10
OSV
OSV
•added 2020/12/15 5:15 p.m.•3 views

DEBIAN-CVE-2020-29566

An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must be temporarily de-scheduled. The device model will signal Xen when it has completed its operation, via an event channel, so that the relevant vCPU is rescheduled. If the device...

5.5CVSS7.2AI score0.00444EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/10/22 12:00 a.m.•23 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.2AI score0.009EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/10/16 12:00 a.m.•10 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.4AI score0.0089EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/10/16 12:00 a.m.•32 views

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2021-08835)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. The software allows the creation of virtual hard drives, virtual switches, and many other virtual devices. A denial of service vulnerability exists in Microsoft Windows Hyper-V. The vulnerability stems...

7.8CVSS8.6AI score0.009EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/16 12:00 a.m.•23 views

Microsoft Windows Hyper-V Elevation of Privilege Vulnerability (CNVD-2021-08829)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. The software allows the creation of virtual hard drives, virtual switches, and many other virtual devices. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V, which can be...

7.8CVSS8.9AI score0.0089EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/09/17 12:00 a.m.•29 views

FreeBSD : FreeBSD -- bhyve privilege escalation via VMCS access (2c5b9cd7-f7e6-11ea-88f8-901b0ef719ab)

AMD and Intel CPUs support hardware virtualization using specialized data structures that control various aspects of guest operation. These are the Virtual Machine Control Structure VMCS on Intel CPUs, and the Virtual Machine Control Block VMCB on AMD CPUs. Insufficient access controls allow root...

8.2CVSS8.1AI score0.00604EPSS
SaveExploits1References2
OSV
OSV
•added 2020/07/07 1:15 p.m.•5 views

DEBIAN-CVE-2020-15567

An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest EPT nested paging tables, Xen would in some circumstances use a series of non-atomic bitfield write...

7.8CVSS8.2AI score0.00276EPSS
SaveExploits0References1
OSV
OSV
•added 2020/07/07 1:15 p.m.•4 views

DEBIAN-CVE-2020-15563

An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HV...

6.5CVSS7.8AI score0.00413EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•23 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

7.4CVSS6.9AI score0.01603EPSS
SaveExploits0References3
OSV
OSV
•added 2019/12/11 6:16 p.m.•21 views

UBUNTU-CVE-2019-19577

An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number ...

7.2CVSS6.8AI score0.00503EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/06/26 12:00 a.m.•11 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code in the host operating system.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the host operating system using a...

7.7CVSS6.4AI score0.01441EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/06/11 12:00 a.m.•5 views

PT-2019-2479 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient input validation in the Hyper-V hardware virtualization system of the Windows operating system. This can be exploited by a remote attacker using...

6.8CVSS7.1AI score0.01879EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2019/06/06 12:00 a.m.•33 views

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to errors in the authentication process in the guest operating system. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

6.8CVSS7.1AI score0.01724EPSS
SaveExploits0References3
Rows per page
Query Builder