vulnerability

MS16-045: Security Update for Windows Hyper-V (3143118)

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Apr 12, 2016
Added
Apr 12, 2016
Modified
Jul 28, 2025

Description

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code. Customers who have not enabled the Hyper-V role are not affected.

Solutions

WINDOWS-HOTFIX-MS16-037-45da2895-fcf0-4175-a533-e0fda3dbc081WINDOWS-HOTFIX-MS16-037-4d0814f6-9f22-43aa-b23c-f6243b1e1f4aWINDOWS-HOTFIX-MS16-045-24c736dd-5445-4c54-855b-4db161bd750dWINDOWS-HOTFIX-MS16-045-d5bd3e67-e082-496b-9a43-28f9630039abWINDOWS-HOTFIX-MS16-045-fb24e957-2eb2-4d53-829a-3bcbbe6493ab
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.