7.2
CVE-2020-16891
- EPSS 0.95%
- Veröffentlicht 16.10.2020 23:15:13
- Zuletzt bearbeitet 23.02.2026 18:21:17
- Erkennungen
Windows Hyper-V Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p> <p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 Version - HwPlatform x64
Microsoft ≫ Windows 10 Version 1607 HwPlatform x64
Microsoft ≫ Windows 10 Version 1709 HwPlatform x64
Microsoft ≫ Windows 10 Version 1803 HwPlatform x64
Microsoft ≫ Windows 10 Version 1809 HwPlatform x64
Microsoft ≫ Windows 10 Version 1903 HwPlatform x64
Microsoft ≫ Windows 10 Version 1909 HwPlatform x64
Microsoft ≫ Windows 10 Version 2004 HwPlatform x64
Microsoft ≫ Windows 8.1 Version - SwEdition - HwPlatform x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 SwEdition - HwPlatform x64
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
Microsoft ≫ Windows Server 2012 Version -
Microsoft ≫ Windows Server 2012 Version r2 SwEdition - HwPlatform -
Microsoft ≫ Windows Server 2016 Version -
Microsoft ≫ Windows Server 2016 Version 1903
Microsoft ≫ Windows Server 2016 Version 1909
Microsoft ≫ Windows Server 2016 Version 2004
Microsoft ≫ Windows Server 2019 Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.95% | 0.578 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
| NIST | 8.8 | 2 | 6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
| Microsoft | 8.8 | 2 | 6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16891