CVE-2019-1399

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1309, CVE-2019-1310.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Microsoft	Windows	7 for x64-based Systems Service Pack 1; 8.1 for x64-based systems; 10 Version 1607 for x64-based Systems; 10 Version 1709 for x64-based Systems; 10 Version 1803 for x64-based Systems; 10 Version 1809 for x64-based Systems
Microsoft	Windows Server	2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for x64-based Systems Service Pack 1; 2012; 2012 (Core installation); 2012 R2; 2012 R2 (Core installation); 2016; 2016 (Core installation); version 1803 (Core Installation); 2019; 2019 (Core installation); 2008 for x64-based Systems Service Pack 2; 2008 for x64-based Systems Service Pack 2 (Core installation)
Microsoft	Windows 10 Version 1903 for x64-based Systems	unspecified
Microsoft	Windows Server, version 1903 (Server Core installation)	unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1399Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1399Patch, Vendor Advisory

Timeline

Published: Nov 12, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-139909.8initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job descript CVE-2019-139916.5Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, bec CVE-2019-139927.8u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Sna CVE-2019-139947.8u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actua CVE-2019-139957.8u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corrup CVE-2019-139987.8u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corrup CVE-2019-139997.8u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential information leakage' i CVE-2019-14005.5An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, ak CVE-2019-140007.8Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potent CVE-2019-140017.8Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT CVE-2019-140027.8APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Sna CVE-2019-140037.5Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Au