Published: 16/10/2020 Updated: 31/12/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 8.8 | Impact Score: 6 | Exploitability Score: 2

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system. The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 10 -
microsoft windows server 2008 r2
microsoft windows server 2016 -
microsoft windows 10 1607
microsoft windows server 2012 -
microsoft windows 10 1709
microsoft windows 10 1803
microsoft windows server 2019 -
microsoft windows 10 1809
microsoft windows server 2016 1903
microsoft windows 10 1903
microsoft windows server 2016 1909
microsoft windows 10 1909
microsoft windows server 2016 2004
microsoft windows 10 2004
microsoft windows 8.1 -
microsoft windows server 2012 r2
microsoft windows server 2008 -
microsoft windows 7 -

It's 2020 and a rogue ICMPv6 network packet can pwn your Microsoft Windows machine

The Register • Thomas Claburn in San Francisco • 13 Oct 2020

Redmond urges folks to apply update ASAP – plus more fixes for Outlook and software from Adobe, Intel, SAP, Red Hat The seven deadly sins letting hackers hijack America's govt networks: These unpatched bugs leave systems open

Patch Tuesday Microsoft's Update Tuesday patch dump for October 2020 has delivered security patches that attempt to address 87 CVEs for a dozen Redmond products. Nadella's security crew has identified 22 remote code execution (RCE) CVEs though the most worrisome looks like CVE-2020-16898, Windows TCP/IP RCE, which is rated 9.8 out 10 in severity. It affects Windows desktop and server systems. According to Microsoft, the Windows TCP/IP stack doesn't properly handle ICMPv6 Router Advertisement pac...

CVE-2020-16891

Vulnerability Summary

Vulnerability Trend

Recent Articles

References

Vulmon Search

About

Products

Connect