Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-0678 State: PUBLISHED Published: 2019-04-08T23:24:02 Last Updated: 2024-08-04T17:51:27.244Z Vendors: Microsoft Products: Microsoft Edge Problem Types: Remote Code Execution Description: An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en
ge Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0678
CVE ID: CVE-2019-0679 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0680 State: PUBLISHED Published: 2019-04-08T23:23:01 Last Updated: 2024-08-04T17:51:27.328Z Vendors: Microsoft Products: Internet Explorer 11 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0680
CVE ID: CVE-2019-0681 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0682 State: PUBLISHED Published: 2019-04-08T23:21:38 Last Updated: 2024-08-04T17:51:27.233Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0689, CVE-2019-0692, CVE-2019-0693, CVE-2019-0694. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0682
CVE ID: CVE-2019-0683 State: PUBLISHED Published: 2019-04-08T23:20:34 Last Updated: 2024-08-04T17:51:27.246Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0683
CVE ID: CVE-2019-0684 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0685 State: PUBLISHED Published: 2019-04-09T20:15:16 Last Updated: 2024-08-04T17:51:27.255Z Vendors: Microsoft Products: Windows Server, Windows Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0685
CVE ID: CVE-2019-0686 State: PUBLISHED Published: 2019-03-06T00:00:00 Last Updated: 2024-08-04T17:51:27.156Z Vendors: Microsoft Products: Microsoft Exchange Server 2010, Microsoft Exchange Server 2013, Microsoft Exchange Server 2016, Microsoft Exchange Server 2019 Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0724. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0686 - http://www.securityfocus.com/bid/106937
CVE ID: CVE-2019-0687 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0688 State: PUBLISHED Published: 2019-04-09T20:15:16 Last Updated: 2024-08-04T17:51:27.131Z Vendors: Microsoft Products: Windows Server, Windows Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0688 - http://www.securityfocus.com/bid/107685 - https://arxiv.org/pdf/1906.10478.pdf
CVE ID: CVE-2019-0689 State: PUBLISHED Published: 2019-04-08T23:19:06 Last Updated: 2024-08-04T17:51:27.231Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0692, CVE-2019-0693, CVE-2019-0694. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0689
CVE ID: CVE-2019-0690 State: PUBLISHED Published: 2019-04-08T23:18:12 Last Updated: 2024-08-04T17:51:27.242Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Denial of Service Description: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0695, CVE-2019-0701. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0690
CVE ID: CVE-2019-0691 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0692 State: PUBLISHED Published: 2019-04-08T23:17:26 Last Updated: 2024-08-04T17:51:27.237Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0689, CVE-2019-0693, CVE-2019-0694. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0692
CVE ID: CVE-2019-0693 State: PUBLISHED Published: 2019-04-08T23:16:28 Last Updated: 2024-08-04T17:51:27.188Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0689, CVE-2019-0692, CVE-2019-0694. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0693
CVE ID: CVE-2019-0694 State: PUBLISHED Published: 2019-04-08T23:15:46 Last Updated: 2024-08-04T17:51:27.095Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0689, CVE-2019-0692, CVE-2019-0693. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0694
CVE ID: CVE-2019-0695 State: PUBLISHED Published: 2019-04-08T23:14:41 Last Updated: 2024-08-04T17:51:27.248Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Denial of Service Description: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0690, CVE-2019-0701. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0695
CVE ID: CVE-2019-0696 State: PUBLISHED Published: 2019-04-08T23:13:31 Last Updated: 2024-08-04T17:51:27.057Z Vendors: Microsoft Products: Windows Server, Windows Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0696
CVE ID: CVE-2019-0697 State: PUBLISHED Published: 2019-04-08T23:45:11 Last Updated: 2024-08-04T17:51:27.237Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Remote Code Execution Description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0697
CVE ID: CVE-2019-0698 State: PUBLISHED Published: 2019-04-08T23:44:39 Last Updated: 2024-08-04T17:51:26.851Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Remote Code Execution Description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0726. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0698
CVE ID: CVE-2019-0699 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0700 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0701 State: PUBLISHED Published: 2019-04-08T23:44:03 Last Updated: 2024-08-04T17:51:27.291Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Denial of Service Description: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0690, CVE-2019-0695. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0701
CVE ID: CVE-2019-0702 State: PUBLISHED Published: 2019-04-08T23:43:27 Last Updated: 2024-08-04T17:51:27.194Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0755, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0702
CVE ID: CVE-2019-0703 State: PUBLISHED Published: 2019-04-08T23:41:43.000Z Last Updated: 2025-10-21T23:45:40.413Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Information Disclosure Description: An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0703
CVE ID: CVE-2019-0704 State: PUBLISHED Published: 2019-04-08T23:40:07 Last Updated: 2024-08-04T17:51:27.035Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Information Disclosure Description: An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0821. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0704
CVE ID: CVE-2019-0705 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0706 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0707 State: PUBLISHED Published: 2019-05-16T18:17:00 Last Updated: 2024-08-04T17:51:27.084Z Vendors: Microsoft Products: Windows Server, Windows, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted applicat
emory to it.To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level, aka 'Windows NDIS Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0707
CVE ID: CVE-2019-0708 State: PUBLISHED Published: 2019-05-16T18:17:00.000Z Last Updated: 2025-10-21T23:45:37.137Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708 - https://cert-portal.siem
eferences: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708 - https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-windows-en - http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en - http://packetstormsecurity.com/files/153133/M
ww.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en - http://packetstormsecurity.com/files/153133/Microsoft-Windows-Remote-Desktop-BlueKeep-Denial-Of-Service.html - http://packetstormsecurity.com/files/153627/Microsoft-Windows-RDP-BlueKeep-Denial-Of-Service.html - http://packetstormsecurity.com/files/154579/BlueKeep-RDP-Remote-Windows-Kernel-Use-After-Free.html - http://packetstormsecurity.com/files/155389/Microsoft-Windows-7-x86-BlueKeep-RDP-Use-After-Free.html - http://packetstormsecurity.com/files/162960/Microsoft-RDP-Remote-Code-Execution.html
CVE ID: CVE-2019-0709 State: PUBLISHED Published: 2019-06-12T13:49:37 Last Updated: 2025-05-20T17:49:52.820Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1703, Windows 10 Version 1709, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on
ser on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system. The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0709
CVE ID: CVE-2019-0710 State: PUBLISHED Published: 2019-06-12T13:49:38 Last Updated: 2025-05-20T17:49:53.388Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1703, Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1709, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation) Problem Types: Denial of Service Descriptio
on 1809, Windows Server 2019, Windows Server 2019 (Server Core installation) Problem Types: Denial of Service Description: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security
ount on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0710
CVE ID: CVE-2019-0711 State: PUBLISHED Published: 2019-06-12T13:49:38 Last Updated: 2025-05-20T17:49:53.882Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1703, Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1709, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation) Problem Types: Denial of Service Descriptio
ount on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0711
CVE ID: CVE-2019-0712 State: PUBLISHED Published: 2019-11-12T18:52:46 Last Updated: 2024-08-04T17:51:27.206Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1903 for x64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Denial of Service Description: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1309, CVE-2019-1310, CVE-2019-1399. Additional Analyst Notes: - CVE Program Container: References: - https://portal.
019-1309, CVE-2019-1310, CVE-2019-1399. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0712
CVE ID: CVE-2019-0713 State: PUBLISHED Published: 2019-06-12T13:49:38 Last Updated: 2025-05-20T17:49:54.435Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1703, Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1709, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 R2 Systems Service Pack 1, Win
ack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 R2 Systems Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation) Problem Types: Denial of Service Description: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability,
erver fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests. Additional Analyst Notes: - CVE P
yper-V would fail to prevent a guest operating system from sending malicious requests. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0713