CVE-2024-20700

—1

CVSS 3.1

7.5 high

EPSS

4%p90

Published

Jan 9, 2024 (Jan 9, 2024)

Modified

Jun 17, 2026

Description

Windows Hyper-V Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 21h2, windows 11 22h2, windows 11 23h2, windows server 2019, windows server 2022, windows server 2022 23h2
Weakness: CWE-362
Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.0%)

In the news7 stories

Week in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-days

Help Net SecurityJan 14, 00:00 UTC · Jan 14, 2024Ransomware in the wildCVE-2023-7028 CVE-2024-20674 CVE-2024-20700+4 CVEs

60

Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

The Hacker NewsJan 10, 10:14 UTC · Jan 10, 2024Vulnerability in the wildCVE-2023-7024 CVE-2024-20674 CVE-2024-20700+3 CVEs

60

Microsoft Fixes 12 RCE Bugs in January Patch Tuesday

Infosecurity MagazineJan 10, 09:30 UTC · Jan 10, 2024Vulnerability CVE-2024-20674 CVE-2024-20700 CVE-2024-0056

60

Microsoft Patch Tuesday for January 2024 fixed 2 critical flaws

Security AffairsJan 9, 22:02 UTC · Jan 9, 2024Vulnerability in the wildCVE-2024-20700 CVE-2024-20674

60

January 2024 Patch Tuesday forecast: A Focus on Printing

Help Net SecurityJan 9, 20:09 UTC · Jan 9, 2024Vulnerability CVE-2024-20674 CVE-2024-20700

60

Microsoft starts off new year with relatively light Patch Tuesday, no zero

Cisco TalosJan 9, 18:58 UTC · Jan 9, 2024Vulnerability in the wildCVE-2024-20674 CVE-2024-20700 CVE-2024-21307+2 CVEs

60

Microsoft fixes critical flaws in Windows Kerberos, Hyper-V (CVE-2024-20674, CVE-2024-20700)

Help Net SecurityJan 9, 00:00 UTC · Jan 9, 2024Vulnerability in the wildCVE-2024-20674 CVE-2024-20700 CVE-2024-21318+6 CVEs

60