CVE-2018-0965

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8439.

Metrics

CVSS 3.0 8.4/10CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Sep 13, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-09663.3A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass VulnerCVE-2018-09675.3A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service DenialCVE-2018-09685.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09695.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09705.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09715.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09725.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09735.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09745.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09755.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09765.3A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sendsCVE-2018-09777.0The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows a