Input validation error in Microsoft Windows and Windows Server - CVE-2019-1399
Published: November 12, 2019 / Updated: November 12, 2019
Vulnerability identifier: #VU22651
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-1399
CWE-ID: CWE-20
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when Microsoft Hyper-V on a host server does not properly validate input from a privileged user on a guest operating system.
Successful exploitation of the vulnerability may result denial of service (DoS) attack against the host system.
Affected software
Microsoft Windows
Windows Server
Windows Server
How to mitigate CVE-2019-1399
Install update from vendor's website.