CVE-2019-0550

—

CVSS 3.0

8.4 high

EPSS

4%p91

Published

Jan 8, 2019 (Jan 8, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2019-0551.

Vendors: microsoft
Products: windows 10, windows server 2016, windows server 2019
Weakness: CWE-20
Vector: CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news2 stories

Microsoft January 2019 Patch Tuesday updates fix 7 critical vulnerabilities

Security AffairsJan 9, 09:19 UTC · Jan 9, 2019Vulnerability in the wildCVE-2019-0547 CVE-2019-0550 CVE-2019-0551+46 CVEs

January 2019 Patch Tuesday: 49 security patches, 7 critical

Help Net SecurityJan 9, 00:00 UTC · Jan 9, 2019Vulnerability in the wildCVE-2019-0547 CVE-2019-0586 CVE-2019-0550+1 CVEs