Skip to content
fr Sign in
7.6 High

CVE-2019-0709 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from…

Description

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system. The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.

Affected products and versions

Product Affected versions Fixed in
Windows 10 Version 1703 10.0 10.0.0 → latest No fix stated
Windows 10 Version 1709 10.0 10.0.0 → latest No fix stated
Windows 10 Version 1507 10.0 10.0.10240.0 → latest No fix stated
Windows 10 Version 1607 10.0 10.0.14393.0 → latest No fix stated
Windows Server 2016 10.0 10.0.14393.0 → latest No fix stated
Windows Server 2016 (Server Core installation) 10.0 10.0.14393.0 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Windows 10 Version 1703

The 83 CVEs of Windows 10 Version 1703 →
CVE-2019-1125 An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory 5.6 Medium CVE-2019-1198 An elevation of privilege exists in SyncController.dll 6.5 Medium CVE-2019-1176 An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory 7.0 High CVE-2019-1186 An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory 7.0 High
Track this CVE