High severity8.4NVD Advisory· Published Sep 13, 2018· Updated Jun 17, 2026
CVE-2018-0965
CVE-2018-0965
Description
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8439.
Affected products
9cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*+ 3 more
- cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*
- (no CPE)range: Version 1607 for x64-based Systems
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
- (no CPE)range: (Server Core installation)
- Range: version 1709 (Server Core Installation)
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0965nvdPatchVendor Advisory
- www.securityfocus.com/bid/105229nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041624nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.