VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 16, 2020· Updated Jun 17, 2026

CVE-2020-16891

CVE-2020-16891

Description

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system. The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.

Affected products

31
  • Microsoft/Windows 10 1809v5
    cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
    Range: 10.0.0
  • Microsoft/Windows Server 2019v52 versions
    cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windows 10 1909v512 versions
    cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*+ 11 more
    • cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x64:*
  • Microsoft/Windows 10 1607v5
    cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
    Range: 10.0.0
  • Microsoft/Windows Server 2016v55 versions
    cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*
  • Microsoft/Windows 7v52 versions
    cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*range: 6.1.0
    • cpe:2.3:o:microsoft:windows_7:-:-:*:*:-:*:x64:*
  • Microsoft/Windows 8.1v52 versions
    cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*range: 6.3.0
    • cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:-:*:x64:*
  • Microsoft/Windows Server 2012v53 versions
    cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*range: 6.2.0
    • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*
  • Microsoft/Windows Hyper-Vllm-fuzzy
  • Microsoft/Windows Server 20082 versions
    cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:-:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:-:*:x64:*
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.