CVE-2017-0185

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V...

CVE-2017-0169

An information disclosure vulnerability exists when Windows Hyper-V running on a Windows 8.1, Windows Server 2012. or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure...

CVE-2017-0178

A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denia...

CVE-2017-0159

A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."...

CVE-2017-0183

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V...

CVE-2017-0162

Technical details for CVE-2017-0162 are not present in the connected documents. The Initial document provides a high-level vulnerability description only. Monitor for updates from official advisories for affected products and fixes.

CVE-2017-0178

CVE-2017-0178 affects Microsoft Hyper-V on Windows 10 (incl. 1511/1607), Windows 8.1, Windows Server 2012 R2, and Windows Server 2016. The vulnerability is a denial-of-service caused by improper validation of input from a privileged user on a guest OS, leading to host crash. Connected docs corrob...

CVE-2017-0185

Technical details for CVE-2017-0185 are not provided in the supplied documents. No concrete product/version/impact information is available here; monitor for updates.

CVE-2017-0183

CVE-2017-0184 is a Hyper-V Denial of Service vulnerability caused by improper validation of input from a privileged user on a guest OS. Exploitation could crash the host Hyper-V service. A known remediation is the security update KB3217841 (April 2017).

CVE-2017-0165

CVE-2017-0165 is a local elevation of privilege vulnerability in Microsoft Windows (affecting Windows 10, 1511, 8.1, RT 8.1, and Windows Server 2012 R2) caused by improper sanitization of handles in memory. The CIRCL/CVE sighting notes an exploit in ExploitDB, indicating public exploitation exist...

CVE-2017-0178

A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denia...

CVE-2017-0179

A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This...

CVE-2017-0158

CVE-2017-0158 is a Windows scripting engine memory corruption vulnerability. The issue arises from improper handling/sanitization of in-memory handles in the Scripting Engine, enabling remote code execution when a user visits a malicious site or opens a crafted document. Affected platforms includ...

CVE-2017-0159

CVE-2017-0159 affects Windows 10 (1607), Windows Server 2012 R2, and Windows Server 2016. Root cause: ADFS may treat Extranet requests as Intranet, bypassing account lockout protections and enabling easier brute-force access. Public exploit details are not provided in the connected documents. Rem...

CVE-2017-0183

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V...

CVE-2017-0168

CVE-2017-0168 is a vulnerability in the Windows Hyper-V Network Switch where input from a guest OS is not properly validated on hosts running Windows 8.1, Windows Server 2008/2008 R2/2012/2012 R2. The underlying issue is improper input validation in the Hyper-V Network Switch, leading to informat...

CVE-2017-0188

CVE-2017-0188 concerns a Win32k information-disclosure vulnerability in Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10, and Windows Server 2016. The win32k component improperly provides kernel information, enabling an attacker who can exploit the issue to obtain information that coul...

CVE-2017-0168: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest...

CVE-2017-0185: Improper Input Validation

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V...

CVE-2017-0183: Improper Input Validation

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V...