CVE-2020-0910

—

CVSS 3.1

8.4 high

EPSS

9%p95

Published

Apr 15, 2020 (Apr 15, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: windows 10, windows server 2016, windows server 2019
Weakness: CWE-20
Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.2%)

In the news3 stories

Microsoft Issues Patches for 3 Bugs Exploited as Zero

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2020Vulnerability in the wildCVE-2020-1020 CVE-2020-0938 CVE-2020-1027+3 CVEs1

Microsoft Patch Tuesday — April 2020: Vulnerability disclosures and Snort coverage

Cisco TalosApr 14, 18:08 UTC · Apr 14, 2020Vulnerability CVE-2020-0939 CVE-2020-0687 CVE-2020-0907+110 CVEs

April 2020 Patch Tuesday: Microsoft fixes three actively exploited vulnerabilities

Help Net SecurityApr 14, 00:00 UTC · Apr 14, 2020Vulnerability in the wildCVE-2020-1020 CVE-2020-0938 CVE-2020-0935+8 CVEs