CVE-2017-0109

High

Published: 17/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Hyper-V vulnerability in Microsoft Windows allows guest OS users to execute arbitrary code on the host OS via a crafted application. It affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server 2016.

Risk Assessment

Exploitation of this vulnerability could lead to control over the host system, posing a serious security threat to the organization.

Recommendation

It is recommended to update systems to the latest versions and apply relevant security patches to minimize the risk associated with this vulnerability.

Other vulnerabilities in Hyper-V w systemach Microsoft Windows

CVE-2017-0075High
The Hyper-V vulnerability in Microsoft Windows allows guest OS users to execute arbitrary code on the host OS via a crafted application. It affects multiple versions of Windows, including Windows 7, 8.1, and Windows 10.

Original NVD description (English source)

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0075.