CVE-2020-0890Improper Privilege Management in Microsoft Windows 10 Version 1803

Severity
6.5MEDIUMNVD
EPSS
11.1%
top 6.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 11
Latest updateMay 24

Description

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.0 | Impact: 4.0

Affected Packages11 packages

CVEListV5microsoft/windows_server_201910.0.0publication
CVEListV5microsoft/windows_server_version_200410.0.0publication

Patches

🔴Vulnerability Details

3
GHSA
GHSA-r384-9q9m-w3m5: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a g2022-05-24
GHSA
GHSA-m37p-rm58-x4hc: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a g2022-05-24
CVEList
Windows Hyper-V Denial of Service Vulnerability2020-09-11

📋Vendor Advisories

1
Microsoft
Windows Hyper-V Denial of Service Vulnerability2020-09-08
CVE-2020-0890 — Improper Privilege Management | cvebase