<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p> <p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | 2020-10 Cumulative Update for Microsoft Windows Server 2012 (KB4580353)2020-10 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4577668)2020-10 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4580387)2020-10 Cumulative Update for Microsoft Windows 10, version 1607 (KB4580346)2020-10 Cumulative Update for Microsoft Windows Server 2012 R2 (KB4580358)2020-10 Cumulative Update for Microsoft Windows 10, version 1803 (KB4580330)2020-10 Cumulative Update for Microsoft Windows 10, version 1903 (KB4577671)2020-10 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4580358)2020-10 Cumulative Update for Microsoft Windows 10, version 1809 (KB4577668)2020-10 Security Only Quality Update for Windows 7 for x64-based Systems (KB4580387)2020-10 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4577671)2020-10 Cumulative Update for Microsoft Windows 10, version 1507 (KB4580327)2020-10 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4580346)2020-10 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4580387)2020-10 Cumulative Update for Microsoft Windows 10, version 1709 (KB4580328)2020-10 Cumulative Update for Microsoft Windows 10, version 1909 (KB4577671)2020-10 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB4579311)2020-10 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4580385)2020-10 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB4580353)2020-10 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4577671)2020-10 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB4580353)2020-10 Cumulative Update for Microsoft Windows 10, version 2004 (KB4579311)2020-10 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4580385)2020-10 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4580387)2020-10 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4580358)2020-10 Security Only Quality Update for Windows 7 for x86-based Systems (KB4580387) | Oct 13, 2020 | Oct 13, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub