CVE-2019-0550

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2019-0551.

Metrics

CVSS 3.0 8.4/10CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
MicrosoftWindows 10 Serversversion 1803 (Server Core Installation)
MicrosoftWindows 10Version 1803 for 32-bit Systems; Version 1803 for ARM64-based Systems; Version 1803 for x64-based Systems; Version 1809 for 32-bit Systems; Version 1809 for ARM64-based Systems; Version 1809 for x64-based Systems
MicrosoftWindows Server 2019(Server Core installation)

References

Timeline

Published
Jan 8, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-05518.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2019-05528.8An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects WindowsCVE-2019-05535.5An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows SubsystemCVE-2019-05545.5An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationCVE-2019-05557.8An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainCVE-2019-05565.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2019-05575.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2019-05585.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2019-05596.5An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook ICVE-2019-05605.5An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office CVE-2019-05615.5An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information DiscloCVE-2019-05625.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t
CVE-2019-0550: High severity, CVSS 8.4 | Vulnix