CVE Catalog

CVE-2017-8664

High
Published: Translated: NVD NIST

Summary

A vulnerability in Windows Hyper-V allows remote code execution when the system fails to properly validate input from a privileged user on a guest operating system.

Risk Assessment

An attacker could exploit this vulnerability to remotely execute code on the system, potentially gaining control over the guest system and the entire Hyper-V environment.

Recommendation

It is recommended to update systems to the latest versions that include security patches and to monitor access to Hyper-V systems.

Other vulnerabilities in Windows Hyper-V

See all
Original NVD description (English source)

Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability".

Vulnerability data from NVD (NIST) · CISA KEV · EPSS