Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
The attacker must be authenticated to be able to exploit this vulnerability.
How would an attacker exploit this vulnerability?
An attacker who successfully exploited this vulnerability could send malformed packets to Hyper-V Replica endpoints on the host from a remote machine.
Security updates
10.0.17763.5820 — https://support.microsoft.com/help/5037765
10.0.20348.2461 — https://support.microsoft.com/help/5037782
10.0.20348.2458 — https://support.microsoft.com/help/5037848
10.0.25398.887 — https://support.microsoft.com/help/5037781
10.0.14393.6981 — https://support.microsoft.com/help/5037763
6.2.9200.24868 — https://support.microsoft.com/help/5037778
6.3.9600.21972 — https://support.microsoft.com/help/5037823
Vulnerabilities 1
-
High 8.8
Windows Hyper-V Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2024-30010 Windows Hyper-V Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30010
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss