High severity7.6NVD Advisory· Published May 9, 2018· Updated Jun 17, 2026
CVE-2018-0961
CVE-2018-0961
Description
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Affected products
11cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
- (no CPE)range: Version 1607 for x64-based Systems
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
- (no CPE)range: (Server Core installation)
- Range: version 1709 (Server Core Installation)
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0961nvdPatchVendor Advisory
- www.securityfocus.com/bid/104032nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040843nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.