VYPR
← All advisories
High severity8.0NVD Advisory· Published Aug 14, 2019· Updated Jun 17, 2026

CVE-2019-0720

CVE-2019-0720

Description

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system. The security update addresses the vulnerability by correcting how Windows Hyper-V Network Switch validates guest operating system network traffic.

Affected products

26
  • Microsoft/Windows 10 19099 versions
    cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*+ 8 more
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*range: 10.0.0
  • Microsoft/Windows 10 1607v5
    cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
    Range: 10.0.0
  • Microsoft/Windows 10 1809v5
    cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
    Range: 10.0.0
  • Microsoft/Windows 7v52 versions
    cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*range: 6.1.0
    • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*
  • Microsoft/Windows 8.1v52 versions
    cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*range: 6.3.0
    • cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*
  • Microsoft/Windows Server 20082 versions
    cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
  • Microsoft/Windows Server 2012v53 versions
    cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*range: 6.2.0
    • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2016v53 versions
    cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019v52 versions
    cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windows Hyper-V Network Switchllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.