CVE-2020-0909

HighCVSS 7.5/10Last modified Aug 19, 2026

Description

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published: May 21, 2020
Last modified: Aug 19, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-09108.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us CVE-2020-09117.8An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who succe CVE-2020-09127.0An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exp CVE-2020-09137.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva CVE-2020-09145.5An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacke CVE-2020-09157.8An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'W CVE-2020-09167.8An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'W CVE-2020-09176.8An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Window CVE-2020-09186.8An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Window CVE-2020-09197.8An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka CVE-2020-09208.8A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa CVE-2020-09215.5Microsoft Graphics Component Denial of Service Vulnerability