First published: Thu Jun 15 2017(Updated: )
Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to gain elevated privileges on a target guest operating system when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability".
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Windows 10 | ||
Windows 10 | =1511 | |
Windows 10 | =1607 | |
Windows 10 | =1703 | |
Microsoft Windows 7 | =sp1 | |
Microsoft Windows | ||
Microsoft Windows | =rt | |
Microsoft Windows Server | =sp2 | |
Microsoft Windows Server | =r2-sp1 | |
Microsoft Windows Server | ||
Microsoft Windows Server | =r2 | |
Microsoft Windows Server 2016 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-0193 has been classified as a high-severity vulnerability due to its potential to allow elevated privileges in the affected systems.
To mitigate CVE-2017-0193, apply the latest security updates provided by Microsoft for your affected Windows version.
CVE-2017-0193 affects various Windows operating systems including Windows 7 SP1, Windows 8.1, and multiple versions of Windows Server.
CVE-2017-0193 allows attackers to gain elevated privileges on a target guest operating system hosted by Hyper-V.
Yes, CVE-2017-0193 specifically impacts Windows Operating Systems from Windows 7 SP1 to Windows Server 2016.