CVE-2020-0890
Windows Hyper-V Denial of Service Vulnerability
MEDIUM 6.5EPSS 2.8%
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p><p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p><p>The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests.</p>
- Affected
- Microsoft · Windows 10 Version 1803 · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1909 · Windows Server, version 1909 (Server Core installation)
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS v2.0 NVD
- 4.9 MEDIUM
AV:L/AC:L/Au:N/C:N/I:N/A:C - EPSS
- 2.84% chance of exploitation in the next 30 days, 86th percentile
- Published
- 2020-09-11
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
- gerhart01/hyperv_local_dos_poc37★ · 2020-09-08