vulnerability
MS16-045: Security Update for Windows Hyper-V (3143118)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Apr 12, 2016 | Apr 12, 2016 | Jul 28, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Apr 12, 2016
Added
Apr 12, 2016
Modified
Jul 28, 2025
Description
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code. Customers who have not enabled the Hyper-V role are not affected.
Solutions
WINDOWS-HOTFIX-MS16-037-45da2895-fcf0-4175-a533-e0fda3dbc081WINDOWS-HOTFIX-MS16-037-4d0814f6-9f22-43aa-b23c-f6243b1e1f4aWINDOWS-HOTFIX-MS16-045-24c736dd-5445-4c54-855b-4db161bd750dWINDOWS-HOTFIX-MS16-045-d5bd3e67-e082-496b-9a43-28f9630039abWINDOWS-HOTFIX-MS16-045-fb24e957-2eb2-4d53-829a-3bcbbe6493ab
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.