CVE-2020-0751Improper Input Validation in Microsoft Windows 10 Version 1903 FOR X64-based Systems

Severity
6.8MEDIUMNVD
NVD6.0
EPSS
0.3%
top 48.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 11
Latest updateMay 24

Description

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests., aka 'Windows Hyper-V

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:HExploitability: 1.5 | Impact: 4.0

Patches

🔴Vulnerability Details

2
GHSA
GHSA-3mg6-q5xj-qqwc: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest op2022-05-24
GHSA
GHSA-fmv8-rwjq-xv6f: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a g2022-05-24

📋Vendor Advisories

1
Microsoft
Windows Hyper-V Denial of Service Vulnerability2020-02-11

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage2020-02-11
Talos
Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage2020-02-11
CVE-2020-0751 — Improper Input Validation in Microsoft | cvebase