CVE-2020-1040
CRITICAL KEVHyper-V RemoteFX vGPU - RCE
Title source: llmDescription
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
References (3)
Scores
CVSS v3
9.0
EPSS
0.0018
EPSS Percentile
39.1%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Details
CISA KEV
2021-11-03
VulnCheck KEV
2020-10-20
InTheWild.io
2021-07-23
ENISA EUVD
EUVD-2020-11934
CWE
CWE-20
Status
published
Products (4)
microsoft/windows_server_2008
r2
microsoft/windows_server_2012
microsoft/windows_server_2012
r2
microsoft/windows_server_2016
Published
Jul 14, 2020
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026