CVE-2019-0722: Windows Hyper-V Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0620, CVE-2019-0709.
Other sources
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system. The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0722?
The severity of CVE-2019-0722 is rated as critical due to its potential for remote code execution.
How does CVE-2019-0722 affect Windows Hyper-V?
CVE-2019-0722 affects Windows Hyper-V by allowing an authenticated user on a guest operating system to exploit input validation flaws to execute arbitrary code on the host server.
How do I fix CVE-2019-0722?
To fix CVE-2019-0722, apply the security updates provided by Microsoft for the affected versions of Windows.
Which Windows versions are affected by CVE-2019-0722?
CVE-2019-0722 affects multiple Windows versions, including Windows 10, Windows 7, Windows 8.1, and various Windows Server editions.
What are the symptoms of exploitation in CVE-2019-0722?
Exploitation of CVE-2019-0722 could result in unauthorized access, data loss, or control over the host server by executing arbitrary code.