CVE-2020-1080: Windows Hyper-V Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system.</p> <p>This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p> <p>The update addresses the vulnerabilities by correcting how Windows Hyper-V handles objects in memory.</p>
Other sources
An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1047.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1080?
CVE-2020-1080 is rated as a critical elevation of privilege vulnerability.
How do I fix CVE-2020-1080?
To fix CVE-2020-1080, update your Windows Hyper-V to the latest security patches provided by Microsoft.
Which systems are affected by CVE-2020-1080?
CVE-2020-1080 affects multiple versions of Windows 10 and Windows Server 2016 and 2019.
Can CVE-2020-1080 be exploited remotely?
CVE-2020-1080 requires local access to exploit, as it involves elevation of privileges.
What are the potential impacts of exploiting CVE-2020-1080?
Exploiting CVE-2020-1080 could allow an attacker to gain elevated privileges on the affected operating system.