hAFL1 – Our Journey of Fuzzing Hyper-V and Discovering a Critical 0-Day

Within hours from the moment our in-house built fuzzer, hAFL1, started running – it found a critical, CVSS 9.9 RCE vulnerability in Hyper-V’s virtual driver...

PT-2021-7675 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the Linux kernel is related to incorrect calculation of used IPC identifiers in the sysvipc find ipc function. This issue may lead to resource exhaustion and denial of servic...

Critical 9.9 Vulnerability in Hyper-V Allowed Attackers to Exploit Azure

Guardicore Labs, in collaboration with SafeBreach Labs, found a critical vulnerability in Hyper-V’s virtual network switch driver vmswitch.sys...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62472)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Hyper-V in Microsoft Windows/Windows...

CVE-2021-34450

Windows Hyper-V Remote Code Execution Vulnerability...

CVE-2021-34450

Windows Hyper-V Remote Code Execution Vulnerability...

Remote code execution

Windows Hyper-V Remote Code Execution Vulnerability...

CVE-2021-34450 Windows Hyper-V Remote Code Execution Vulnerability

...

CVE-2021-34450

CVE-2021-34450 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Hyper-V components on Windows Server/Windows; attacker could exploit from within a guest VM to execute code on the host (authenticated VM user). Exploitation details in connected sources indicate host compromise vi...

Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66058)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A denial-of-service vulnerability exists in Hyper-V in Microsoft...

Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66057)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A denial-of-service vulnerability exists in Hyper-V in Microsoft...

Vulristics Microsoft Patch Tuesday July 2021: Zero-days EoP in Kernel and RCE in Scripting Engine, RCEs in Kernel, DNS Server, Exchange and Hyper-V

Hello everyone! For the past 9 months, Ive been doing Microsoft Patch Tuesday reviews quarterly. Now I think it would be better to review the July Patch Tuesday while the topic is still fresh. And that will save us some time in the next Last Week’s Security news episode. So, July Patch Tuesday, 1...

CVE-2021-33755

Windows Hyper-V Denial of Service Vulnerability...

CVE-2021-33758

Windows Hyper-V Denial of Service Vulnerability...

CVE-2021-33755

Windows Hyper-V Denial of Service Vulnerability...

Denial of service

Windows Hyper-V Denial of Service Vulnerability...

CVE-2021-33758

Windows Hyper-V Denial of Service Vulnerability...

Denial of service

Windows Hyper-V Denial of Service Vulnerability...

CVE-2021-33755

Windows Hyper-V Denial of Service Vulnerability...

CVE-2021-33758

CVE-2021-33758 is a Windows Hyper-V Denial of Service vulnerability affecting Hyper-V on Windows Server/Windows systems. The CVSS3 base metrics indicate a NETWORK attack vector, LOW attack complexity, with privileges required: LOW and no user interaction, leading to a high availability impact. Pu...