CVE-2019-0550

CVSS 3.0: 8.4 high
EPSS: 4%p91
Published: Jan 8, 2019 · Jan 8, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-0550 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2019-0551.

Vendors: microsoft

Products: windows 10, windows server 2016, windows server 2019

Weakness: CWE-20

Vector: CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news

2 stories

Microsoft January 2019 Patch Tuesday updates fix 7 critical vulnerabilities

Security AffairsJan 9, 09:19 UTC · Jan 9, 2019VulnerabilityExploitedCVE-2019-0547 CVE-2019-0550 CVE-2019-0551+463 · 1 read

January 2019 Patch Tuesday: 49 security patches, 7 critical

Help Net SecurityJan 9, 00:00 UTC · Jan 9, 2019VulnerabilityExploitedCVE-2019-0547 CVE-2019-0586 CVE-2019-0550+11