← CVE Intelligence

CVE-2018-8489

Microsoft / Windows 7 PUBLISHED

Description (CNA)

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8490.

Affected (CNA)

Vendor / productVersions
Microsoft / Windows 7affected x64-based Systems Service Pack 1
Microsoft / Windows Server 2012 R2affected (Server Core installation)
Microsoft / Windows RT 8.1affected Windows RT 8.1
Microsoft / Windows Server 2008affected x64-based Systems Service Pack 2; affected x64-based Systems Service Pack 2 (Server Core installation)
Microsoft / Windows Server 2019affected (Server Core installation)
Microsoft / Windows Server 2012affected (Server Core installation)
Microsoft / Windows 8.1affected x64-based systems
Microsoft / Windows Server 2016affected (Server Core installation)
Microsoft / Windows Server 2008 R2affected x64-based Systems Service Pack 1; affected x64-based Systems Service Pack 1 (Server Core installation)
Microsoft / Windows 10affected Version 1607 for x64-based Systems; affected Version 1703 for x64-based Systems; affected Version 1709 for x64-based Systems; affected Version 1803 for x64-based Systems; affected Version 1809 for 32-bit Systems; affected Version 1809 for x64-based Systems; affected x64-based Systems
Microsoft / Windows 10 Serversaffected version 1709 (Server Core Installation); affected version 1803 (Server Core Installation)

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.