CVE-2017-8711: microsoft corporation windows hyper-v

Vulnerability summary

CVE-2017-8711 is a medium (CVSS 5.3) vulnerability in microsoft corporation windows hyper-v. EPSS estimates a 2.05% chance of exploitation in the next 30 days, higher than 80.9% of scored vulnerabilities.

Timeline

1. 13-09-2017
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8707, CVE-2017-8706, CVE-2017-8712, and CVE-2017-8713.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.