CVE-2019-0635

MEDIUM

Windows Hyper-V - Authenticated Information Disclosure via Improper Input Validation

Title source: llm
STIX 2.1

Description

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106884

Scores

CVSS v3 6.2
EPSS 0.0244
EPSS Percentile 82.3%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Details

CWE
CWE-20
Status published
Products (16)
microsoft/windows_10
microsoft/windows_10 1607
microsoft/windows_10 1703
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_7
microsoft/windows_8.1
microsoft/windows_server_2008
microsoft/windows_server_2008 r2 sp1
... and 6 more
Published Mar 05, 2019
Tracked Since Feb 18, 2026