CVE-2019-1471

—

CVSS 3.1

8.2 high

EPSS

8%p95

Published

Dec 10, 2019 (Dec 10, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: windows 10, windows server 2016, windows server 2019
Weakness: CWE-20
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.2%)

In the news3 stories

Latest Microsoft Update Patches New Windows 0

The Hacker NewsDec 11, 06:19 UTC · Dec 11, 2019Vulnerability CVE-2019-1458 CVE-2019-1471 CVE-2019-14621

Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosDec 10, 18:41 UTC · Dec 10, 2019Vulnerability CVE-2019-1468 CVE-2019-1471 CVE-2019-1458+22 CVEs

December 2019 Patch Tuesday: Microsoft fixes one actively exploited zero-day

Help Net SecurityDec 10, 00:00 UTC · Dec 10, 2019Exploit / PoC in the wildCVE-2019-1458 CVE-2019-1471 CVE-2019-1485+5 CVEs