A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.
To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.
The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.
To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.
The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows 10 Version 1703 | affected |
|
||||||
| Microsoft | Windows 10 Version 1803 | affected |
|
||||||
| Microsoft | Windows Server, version 1803 (Server Core Installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1709 | affected |
|
||||||
| Microsoft | Windows 10 Version 1507 | affected |
|
||||||
| Microsoft | Windows 10 Version 1607 | affected |
|
||||||
| Microsoft | Windows Server 2016 | affected |
|
||||||
| Microsoft | Windows Server 2016 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 8.1 | affected |
|
||||||
| Microsoft | Windows Server 2012 R2 | affected |
|
||||||
| Microsoft | Windows Server 2012 R2 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1809 | affected |
|
||||||
| Microsoft | Windows 10 Version 1809 | affected |
|
||||||
| Microsoft | Windows Server 2019 | affected |
|
||||||
| Microsoft | Windows Server 2019 (Server Core installation) | affected |
|
Configuration 1 [-]
|
No data.
No data.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2019-1470 | A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 20 May 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0711, CVE-2019-0713. | A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests. |
| Title | Windows Hyper-V Denial of Service Vulnerability | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2025-05-20T17:49:53.388Z
Reserved: 2018-11-26T00:00:00
Link: CVE-2019-0710
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-06-12T14:29:01.180
Modified: 2025-05-20T18:15:28.447
Link: CVE-2019-0710
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses