CVE-2017-0193
HighSummary
A vulnerability in Windows Hyper-V allows an attacker to gain elevated privileges on a target guest operating system when Hyper-V instruction emulation fails to properly enforce privilege levels.
Risk Assessment
The organization may be exposed to unauthorized access to guest systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update systems to the latest versions that include security patches addressing this vulnerability.
Other vulnerabilities in Windows Hyper-V
See all- CVE-2017-8714High
The Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1607, and Windows Server 2016 has a vulnerability allowing remote code execution when it fails to properly validate input from an authenticated user on a guest operating system.
- CVE-2017-8664High
A vulnerability in Windows Hyper-V allows remote code execution when the system fails to properly validate input from a privileged user on a guest operating system.
- CVE-2017-0212High
Windows Hyper-V contains a vulnerability that allows for elevation of privilege when Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 fail to properly validate vSMB packet data.
- CVE-2026-40402Critical
A use after free vulnerability in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
- CVE-2021-26867Critical
Remote code execution vulnerability in Windows Hyper-V. An attacker could exploit this flaw to execute arbitrary code on the host.
- CVE-2026-61368Medium
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
- CVE-2026-50680High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-50485Medium
In Windows Hyper-V, a buffer over-read vulnerability allows an authorized attacker to cause a denial of service (DoS) over an adjacent network.
- CVE-2026-54129High
A use-after-free vulnerability exists in Windows Hyper-V. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-54127High
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to gain elevated privileges on a target guest operating system when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability".