CVE-2016-0088
CriticalSummary
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the host system, posing a serious threat to the security of organizational data and systems.
Recommendation
It is recommended to update systems to the latest versions and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Hyper-V
See all- CVE-2017-0095High
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, allowing attackers to execute arbitrary code on a target OS.
- CVE-2020-0909High
Denial of service vulnerability in Hyper-V on Windows Server due to improper handling of specially crafted network packets. An attacker could send such packets to the Hyper-V server, causing service failure.
Original NVD description (English source)
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability."