Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fj3r-5xm4-3r4m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.

EPSS

Процентиль: 67%
0.00539
Низкий

8.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
nvd
больше 4 лет назад

<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p> <p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>

CVSS3: 8.8
msrc
больше 4 лет назад

Windows Hyper-V Remote Code Execution Vulnerability

CVSS3: 8.8
fstec
больше 4 лет назад

Уязвимость системы аппаратной виртуализации Hyper-V операционной системы Windows, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 67%
0.00539
Низкий

8.8 High

CVSS3

Дефекты

CWE-20