Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 3 |
CVE-ID | CVE-2020-0910 CVE-2020-0917 CVE-2020-0918 |
CWE-ID | CWE-20 CWE-119 |
Exploitation vector | Local network |
Public exploit |
Public exploit code for vulnerability #1 is available. Public exploit code for vulnerability #2 is available. |
Vulnerable software Subscribe |
Windows Operating systems & Components / Operating system Windows Server Operating systems & Components / Operating system |
Vendor | Microsoft |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
EUVDB-ID: #VU26776
Risk: Medium
CVSSv3.1: 7.6 [CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2020-0910
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: Yes
DescriptionThe vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to insufficient validation of user-supplied input in the Windows Hyper-V on a host server. A remote administrator on the local network can run a specially crafted application on a guest operating system and execute arbitrary code.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 1809 - 10 1909
Windows Server: 2019 - 2019 1909
External linkshttp://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0910
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
EUVDB-ID: #VU26777
Risk: Medium
CVSSv3.1: 7.6 [CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2020-0917
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: Yes
DescriptionThe vulnerability allows a remote user to escalate privileges on the target system.
The vulnerability exists due to a boundary error in the Windows Hyper-V on a host server. A remote administrator on the local network can trigger memory corruption and gain elevated privileges on a target operating system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 1809 - 10 1909
Windows Server: 2019 - 2019 1909
External linkshttp://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0917
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
EUVDB-ID: #VU26778
Risk: Medium
CVSSv3.1: 7.3 [CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-0918
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote user to escalate privileges on the target system.
The vulnerability exists due to a boundary error in the Windows Hyper-V on a host server. A remote administrator on the local network can trigger memory corruption and gain elevated privileges on a target operating system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsWindows: 10 1809 - 10 1909
Windows Server: 2019 - 2019 1909
External linkshttp://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0918
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.