PT-2017-10459

Name of the Vulnerable Software and Affected Versions Windows Hyper-V versions 10 Gold, 1511, 1607, and 1703 Windows Server 2016 Description The issue arises from the failure to properly validate vSMB packet data, leading to an elevation of privilege. This allows attackers to affect the system...

KB4019472: Windows 10 Version 1607 and Windows Server 2016 May 2017 Cumulative Update

The remote Windows host is missing security update KB4019472. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a...

KB4016871: Windows 10 Version 1703 May 2017 Cumulative Update

The remote Windows 10 version 1703 host is missing security update KB4016871. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a us...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2017-05358)

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to access information on the host system...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-05756)

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to execute arbitrary code on the host computer...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2017-05360)

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to access information on the host system...

Microsoft Windows Hyper-V Remote Denial of Service Vulnerability (CNVD-2017-05723)

Microsoft Windows is the popular computer operating system. A remote denial of service vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to cause the host computer to crash...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2017-05200)

Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. A denial of service vulnerability exists in Hyper-V for Microsoft Windows, which originates when the program fails to properly validate user input. An attacker coul...

CVE-2017-0180

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162,...

Information disclosure

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest...

Remote code execution

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162,...

Information disclosure

An information disclosure vulnerability exists when Windows Hyper-V running on a Windows 8.1, Windows Server 2012. or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure...

CVE-2017-0168

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest...

CVE-2017-0168: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest...

CVE-2017-0180: Improper Input Validation

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162,...

CVE-2017-0181: Improper Input Validation

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is...

CVE-2017-0163: Improper Input Validation

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162,...

CVE-2017-0169: Improper Input Validation

An information disclosure vulnerability exists when Windows Hyper-V running on a Windows 8.1, Windows Server 2012. or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure...

CVE-2017-0162: Improper Input Validation

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code...

Hyper-V Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating syste...