CVE-2020-1040criticalunder attackCWE-20

CVE-2020-1040: critical vulnerability in Microsoft Windows Server

Published · Updated

Follow this CVE+ Monitor Windows Server+ Monitor Hyper-V RemoteFX

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

58Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9epss 7.6%
from disclosure to weapon
Published on NVDJul 14
CISA KEV+477d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A flaw in Hyper-V RemoteFX vGPU allows a user on a virtual machine to execute arbitrary code on the host server by sending specially crafted input that is not properly validated. This is critical because it breaks the isolation between virtual machines and the host.

Technical detail

The vulnerability exists in RemoteFX vGPU input validation on the host; an authenticated guest OS user can send malformed requests that bypass validation checks, achieving unauthenticated remote code execution on the hypervisor. Attack surface is limited to environments with RemoteFX vGPU enabled and guest-to-host communication channels.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Microsoft · Windows Server
Related CVEs — Microsoft Windows Server

In the same product, most dangerous first.

CVE-2019-0708CRITICALCVE-2019-0708EPSS 100.0%KEVCVE-2020-1350CRITICALCVE-2020-1350EPSS 96.7%KEVCVE-2020-0601HIGHCVE-2020-0601EPSS 89.1%KEVCVE-2019-1458HIGHCVE-2019-1458EPSS 74.4%KEVCVE-2020-0938HIGHCVE-2020-0938EPSS 69.0%KEVCVE-2020-1020HIGHCVE-2020-1020EPSS 65.0%KEV