CVE-2020-1036

—

CVSS 3.1

9.0 critical

EPSS

6%p93

Published

Jul 14, 2020 (Jul 14, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.

Vendors: microsoft
Products: windows server 2008, windows server 2012, windows server 2016
Weakness: CWE-20
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.2%)

In the news2 stories

Microsoft July 2020 Security Updates address 123 vulnerabilities

Security AffairsJul 15, 09:16 UTC · Jul 15, 2020Vulnerability CVE-2020-1350 CVE-2020-1400 CVE-2020-1401+20 CVEs1

Vulnerability Spotlight: Multiple vulnerabilities in RemoteFX affects, AMD, Intel chips

Cisco TalosJul 14, 18:10 UTC · Jul 14, 2020Vulnerability CVE-2020-1032 CVE-2020-1036 CVE-2020-1040+3 CVEs