High severity7.6NVD Advisory· Published Mar 17, 2017· Updated Jun 17, 2026
CVE-2017-0095
CVE-2017-0095
Description
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0021.
Affected products
6cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0095nvdPatchVendor Advisory
- www.securityfocus.com/bid/96699nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1037999nvd
News mentions
0No linked articles in our index yet.