CVE-2020-0910
HIGH 8.4EPSS 9.2%
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
- Affected
- Microsoft · Windows · Windows Server · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1909 for x64-based Systems · Windows Server, version 1909 (Server Core installation)
- CVSS v3.1 NVD
- 8.4 HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.7 HIGH
AV:A/AC:L/Au:S/C:C/I:C/A:C - EPSS
- 9.25% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2020-04-15
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
- kfmgang/CVE-2020-09100★ · 2020-04-22