PT-2020-2053

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A remote code execution issue exists due to improper input validation from an authenticated user on a guest operating system. This is related to a buffer overflow in the Hyper-V...

UBUNTU-CVE-2019-19577

An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number ...

PT-2019-3954

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V hardware virtualization system of the Windows operating system. It may allow a remote attacker to cause a denial o...

PT-2019-3874

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V hardware virtualization system of the Windows operating system. It may allow a remote attacker to cause a denial o...

PT-2019-3917

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V hardware virtualization system of the Windows operating system. It may allow a remote attacker to execute arbitrar...

PT-2019-3919

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V hardware virtualization system of the Windows operating system. It may allow a remote attacker to cause a denial o...

PT-2019-3955

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V hardware virtualization system of the Windows operating system. It may allow a remote attacker to cause a...

PT-2019-3180

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to an information disclosure problem where Windows Hyper-V writes uninitialized memory to disk. This could allow an attacker to obtain sensitive information. Ther...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the host operating system using a...

PT-2019-2479 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient input validation in the Hyper-V hardware virtualization system of the Windows operating system. This can be exploited by a remote attacker using...

Hyper-V Hardware Virtualization Disclosure

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to errors in the authentication process in the guest operating system. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Microsoft Hyper-V Hardware Virtualization Code Execution

The vulnerability of Microsoft Hyper-V hardware virtualization technology for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code on the host operating system through a specially created...

ALPINE-CVE-2018-18883

An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service NULL pointer dereference or possibly have unspecified other impact because nested VT-x is not properly restricted...

Microsoft Hyper-V Hardware Virtualization Code Execution

The vulnerability of Microsoft Hyper-V hardware virtualization technology for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host operating system through a specially created...

PT-2018-1537

Name of the Vulnerable Software and Affected Versions Windows Hyper-V versions prior to the fixed version Windows Server 2016 Windows 10 Windows 10 Servers Description The issue is related to insufficient input validation in the Microsoft Hyper-V hardware virtualization system for Windows operati...

PT-2018-1538

Name of the Vulnerable Software and Affected Versions Windows Hyper-V versions on Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers Description A remote code execution issue exists due to improper input validation from an authenticated user o...

UBUNTU-CVE-2018-12893

An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leadi...

UBUNTU-CVE-2017-15592

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service hypervisor crash or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests...

A Modern Hypervisor as a Basis for a Sandbox

In the field of information security, sandboxes are used to isolate an insecure external environment from a secure internal environment or vice versa, to protect against the exploitation of vulnerabilities, and to analyze malicious code. At Kaspersky Lab, we have several sandboxes, including an...

ALPINE-CVE-2016-9377

Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service guest crash by leveraging IDT entry miscalculation...