NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2019-1471

CVSS 3.1: 8.2 high
EPSS: 8%p95
Published: Dec 10, 2019 · Dec 10, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-1471 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.

Vendors: microsoft

Products: windows 10, windows server 2016, windows server 2019

Weakness: CWE-20

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.2%)

In the news

3 stories

Latest Microsoft Update Patches New Windows 0

The Hacker NewsDec 11, 06:19 UTC · Dec 11, 2019VulnerabilityCVE-2019-1458 CVE-2019-1471 CVE-2019-14622

60

Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosDec 10, 18:41 UTC · Dec 10, 2019VulnerabilityCVE-2019-1468 CVE-2019-1471 CVE-2019-1458+222 · 1 read

60

December 2019 Patch Tuesday: Microsoft fixes one actively exploited zero-day

Help Net SecurityDec 10, 00:00 UTC · Dec 10, 2019Exploit / PoCExploitedCVE-2019-1458 CVE-2019-1471 CVE-2019-1485+53 · 1 read

60