CVE-2024-38235
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
A vulnerability in Windows Hyper-V allows a denial of service (DoS) attack. An attacker could exploit this flaw to disrupt the service.
Risk Assessment
The risk is the potential disruption of virtualization services, which could lead to downtime in production environments.
Recommendation
It is recommended to apply the security updates provided by the vendor for Windows immediately.
Other vulnerabilities in Windows Hyper-V
See all- CVE-2026-96223High
A use-after-free vulnerability in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-88071High
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-87705High
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
- CVE-2026-85369High
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-85343High
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-83931High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2017-8714High
The Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1607, and Windows Server 2016 has a vulnerability allowing remote code execution when it fails to properly validate input from an authenticated user on a guest operating system.
- CVE-2017-8664High
A vulnerability in Windows Hyper-V allows remote code execution when the system fails to properly validate input from a privileged user on a guest operating system.
- CVE-2017-0193High
A vulnerability in Windows Hyper-V allows an attacker to gain elevated privileges on a target guest operating system when Hyper-V instruction emulation fails to properly enforce privilege levels.
- CVE-2017-0212High
Windows Hyper-V contains a vulnerability that allows for elevation of privilege when Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 fail to properly validate vSMB packet data.
Original NVD description (English source)
Windows Hyper-V Denial of Service Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS