CVE-2020-0890 — Improper Privilege Management in Microsoft Windows 10 Version 1803
Severity
6.5MEDIUMNVD
EPSS
11.1%
top 6.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 11
Latest updateMay 24
Description
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.
To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.
The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.0 | Impact: 4.0
Affected Packages11 packages
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-r384-9q9m-w3m5: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a g↗2022-05-24
GHSA▶
GHSA-m37p-rm58-x4hc: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a g↗2022-05-24