CVE-2019-0966

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'.

Metrics

CVSS 3.0 6.8/10CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jul 15, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-09685.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker wCVE-2019-09716.5An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specCVE-2019-09726.5This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attCVE-2019-09737.8An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading CVE-2019-09747.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who succCVE-2019-09756.3A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addCVE-2019-09765.5A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contentCVE-2019-09774.7An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker wCVE-2019-09795.4A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user providedCVE-2019-09807.5A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core CVE-2019-09817.5A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core CVE-2019-09827.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerabilit
CVE-2019-0966: Medium severity, CVSS 6.8 | Vulnix