CVE-2020-17095

—

CVSS 3.1

8.5 high

EPSS

5%p92

Published

Dec 10, 2020 (Dec 10, 2020)

Modified

Jun 17, 2026

Description

Windows Hyper-V Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.0%)

In the news3 stories

Microsoft December 2020 Patch Tuesday fixes 58 bugs, 9 are critical

Security AffairsDec 9, 08:50 UTC · Dec 9, 2020Vulnerability in the wildCVE-2020-17132 CVE-2020-17121 CVE-2020-17095+2 CVEs

60

Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws

The Hacker NewsDec 9, 04:58 UTC · Dec 9, 2020Exploit / PoC in the wildCVE-2020-17132 CVE-2020-17118 CVE-2020-17121+4 CVEs

60

A light December 2020 Patch Tuesday for a no-stress end of the year

Help Net SecurityDec 8, 00:00 UTC · Dec 8, 2020Vulnerability in the wildCVE-2020-17132 CVE-2020-16875 CVE-2020-17095+2 CVEs

60