Privilege escalation

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0918...

Privilege escalation

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0917...

Remote code execution

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'...

CVE-2020-0917

Technical details are not publicly available in the provided connected documents for CVE-2020-0917. Monitor for updates.

CVE-2020-0917

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0918...

CVE-2020-0918

CVE-2020-0918 corresponds to a Windows Hyper-V Elevation of Privilege vulnerability. Affected component: Hyper-V on Windows Server hosts. Root cause: vulnerability exists when the Hyper-V memory-handling of objects is faulty, allowing an attacker to elevate privileges on the host. Impact: high fo...

CVE-2020-0918

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0917...

CVE-2020-0910

CVE-2020-0910 : A remote code execution vulnerability in Windows Hyper-V occurs when the Hyper-V host fails to properly validate guest OS input from an authenticated user. An attacker who can run a crafted application inside a guest could cause the Hyper-V host to execute arbitrary code on the ho...

CVE-2020-0910

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'...

CVE-2020-0918: Undefined Security Weakness

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0917...

CVE-2020-0917: Undefined Security Weakness

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0918...

CVE-2020-0910: Improper Input Validation

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'...

April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion

This month’s Microsoft Patch Tuesday addresses 113 vulnerabilities with 19 of them labeled as Critical. The 19 Critical vulnerabilities cover Adobe Font Manager Library 0-day, SharePoint, Hyper-V, Scripting Engines, Media Foundation, Microsoft Graphics, Windows Codecs, and Dynamics Business...

HTTP/2: flood using HEADERS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RSTSTREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

Windows Hyper-V Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could...

Windows Hyper-V Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system. This vulnerability by itself does not allow...

Windows Hyper-V Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system. This vulnerability by itself does not allow...

PT-2020-2054

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to an elevation of privilege vulnerability. It occurs when Windows Hyper-V on a host server fails to properly handle objects in memory. This allows a remote...

PT-2020-2056

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to an elevation of privilege vulnerability. It occurs due to improper handling of objects in memory by Windows Hyper-V on a host server. This vulnerability can be...

PT-2020-2053

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A remote code execution issue exists due to improper input validation from an authenticated user on a guest operating system. This is related to a buffer overflow in the Hyper-V...