Microsoft Windows
CVE-2019-0713 — Windows Hyper-V Denial of Service Vulnerability
Executive Summary
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.
Overview
6.8
CVSS MEDIUM
Important
MS Severity
Not Exploited
MS Exploit Status
N/A
MS Exploit Likelihood
CVSS Vector
ATTACK VECTOR
Adjacent
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
Low
USER INTERACTION
None
SCOPE
Changed
Temporal Score: 6.1
EPSS Score
0.01879
probability of exploitation in the next 30 days
0.76731 percentile - updated 2026-06-20
View on FIRST.org
Affected Products
27 affected products
| Product | KB Article | Severity | Impact | Restart Required |
|---|---|---|---|---|
| Windows 10 for x64-based Systems | 4503291 (Security Update) |
Important | Denial of Service | Yes |
| Windows 10 Version 1607 for x64-based Systems | 4503267 (Security Update) |
Important | Denial of Service | Yes |
| Windows 10 Version 1703 for x64-based Systems | 4503279 (Security Update) |
Important | Denial of Service | Yes |
| Windows 10 Version 1709 for ARM64-based Systems | 4503284 (Security Update) |
Important | Denial of Service | Yes |
| Windows 10 Version 1709 for x64-based Systems | 4503284 (Security Update) |
Important | Denial of Service | Yes |
| Windows 10 Version 1803 for ARM64-based Systems | 4503286 (Security Update) |
Important | Denial of Service | Yes |
| Windows 10 Version 1803 for x64-based Systems | 4503286 (Security Update) |
Important | Denial of Service | Yes |
| Windows 10 Version 1809 for ARM64-based Systems | 4503327 (Security Update) |
Important | Denial of Service | Yes |
| Windows 10 Version 1809 for x64-based Systems | 4503327 (Security Update) |
Important | Denial of Service | Yes |
| Windows 7 for x64-based Systems Service Pack 1 | 4503292 (Monthly Rollup) 4503269 (Security Only) |
Important | Denial of Service | Yes |
| Windows 8.1 for x64-based systems | 4503276 (Monthly Rollup) 4503290 (Security Only) |
Important | Denial of Service | Yes |
| Windows RT 8.1 | 4503276 (Monthly Rollup) |
Important | Denial of Service | Yes |
| Windows Server 2008 for Itanium-Based Systems Service Pack 2 | 4503273 (Monthly Rollup) 4503287 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2008 for x64-based Systems Service Pack 2 | 4503273 (Monthly Rollup) 4503287 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | 4503273 (Monthly Rollup) 4503287 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 | 4503292 (Monthly Rollup) 4503269 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | 4503292 (Monthly Rollup) 4503269 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | 4503292 (Monthly Rollup) 4503269 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2012 | 4503285 (Monthly Rollup) 4503263 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2012 (Server Core installation) | 4503285 (Monthly Rollup) 4503263 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2012 R2 | 4503276 (Monthly Rollup) 4503290 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2012 R2 (Server Core installation) | 4503276 (Monthly Rollup) 4503290 (Security Only) |
Important | Denial of Service | Yes |
| Windows Server 2016 | 4503267 (Security Update) |
Important | Denial of Service | Yes |
| Windows Server 2016 (Server Core installation) | 4503267 (Security Update) |
Important | Denial of Service | Yes |
| Windows Server 2019 | 4503327 (Security Update) |
Important | Denial of Service | Yes |
| Windows Server 2019 (Server Core installation) | 4503327 (Security Update) |
Important | Denial of Service | Yes |
| Windows Server, version 1803 (Server Core Installation) | 4503286 (Security Update) |
Important | Denial of Service | Yes |
Patches
11 patches
| Article | Type | Restart |
|---|---|---|
4503291 |
Security Update | Yes |
4503267 |
Security Update | Yes |
4503279 |
Security Update | Yes |
4503284 |
Security Update | Yes |
4503286 |
Security Update | Yes |
4503327 |
Security Update | Yes |
4503292 (Monthly Rollup) 4503269 |
Monthly Rollup | Yes |
4503276 (Monthly Rollup) 4503290 |
Monthly Rollup | Yes |
4503276 |
Monthly Rollup | Yes |
4503273 (Monthly Rollup) 4503287 |
Monthly Rollup | Yes |
4503285 (Monthly Rollup) 4503263 |
Monthly Rollup | Yes |
Known Exploits
No known exploits have been linked for this CVE yet. When available, exploit references will be sourced from public repositories and may be unverified, incomplete, or non-functional. Always review code carefully before use in any environment.
Acknowledgments
Hyper-V Development Team
References
On This Page