SARA / Free Tools / CVE / CVE-2019-0721

CVE-2019-0721 — A remote code execution vulnerability exists when Windows Hyper-V Network Switch

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2

CVSS
— —
EPSS
2.03% (top 16.40%)
CWE
—
Published
2019-11-12T18:52:47.000Z
Last modified
2024-08-04T17:51:27.295Z
CVSS vector
—

01What is this vulnerability?

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0719.

02Affected products

VendorProductVersions
MicrosoftWindows10 Version 1709 for x64-based Systems, 10 Version 1803 for x64-based Systems, 10 Version 1809 for x64-based Systems
MicrosoftWindows Serverversion 1803 (Core Installation), 2019, 2019 (Core installation)
MicrosoftWindows 10 Version 1903 for x64based Systems — unspecified
MicrosoftWindows Server, version 1903 (Server Core installation)unspecified

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

CVE-2019-0719
Cited in vendor advisory

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →
EPSS detail → Search KEV → Ask SARA →