{"schemaVersion":3,"id":"CVE-2019-0720","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.\nAn attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.\nThe security update addresses the vulnerability by correcting how Windows Hyper-V Network Switch validates guest operating system network traffic.","dates":{"published":"2019-08-14T20:55:02.000Z","modified":"2024-08-04T17:51:27.291Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.7,"severity":"high","vector":"AV:A/AC:L/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03841,"percentile":0.90067,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.03841},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.03841,"percentile":0.90067}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.03841,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.03841,"percentile":0.90067}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"microsoft","product":"windows_10","name":"windows 10","label":"windows_10","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"1607","noFixRecorded":false,"fixedIn":null},{"text":"1703","noFixRecorded":false,"fixedIn":null},{"text":"1709","noFixRecorded":false,"fixedIn":null},{"text":"1803","noFixRecorded":false,"fixedIn":null},{"text":"1809","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 1607 | 1703 | 1709 | 1803 | 1809","eol":null,"hubHref":"/vendor/microsoft/windows_10"},{"vendor":"microsoft","product":"windows 10 version 1507","name":"Windows 10 Version 1507","label":"windows 10 version 1507","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1507"},{"vendor":"microsoft","product":"windows 10 version 1607","name":"Windows 10 Version 1607","label":"windows 10 version 1607","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1607"},{"vendor":"microsoft","product":"windows 10 version 1703","name":"Windows 10 Version 1703","label":"windows 10 version 1703","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1703"},{"vendor":"microsoft","product":"windows 10 version 1709","name":"Windows 10 Version 1709","label":"windows 10 version 1709","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1709"},{"vendor":"microsoft","product":"windows 10 version 1803","name":"Windows 10 Version 1803","label":"windows 10 version 1803","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1803"},{"vendor":"microsoft","product":"windows 10 version 1809","name":"Windows 10 Version 1809","label":"windows 10 version 1809","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1809"},{"vendor":"microsoft","product":"windows_7","name":"windows 7","label":"windows_7","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_7"},{"vendor":"microsoft","product":"windows 7 service pack 1","name":"Windows 7 Service Pack 1","label":"windows 7 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.1.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.1.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_7_service_pack_1"},{"vendor":"microsoft","product":"windows_8.1","name":"windows 8.1","label":"windows_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 6.3.0, < publication","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.3.0, < publication | na","eol":null,"hubHref":"/vendor/microsoft/windows_81"},{"vendor":"microsoft","product":"windows_server_2008","name":"windows server 2008","label":"windows_server_2008","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2:sp1","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008"},{"vendor":"microsoft","product":"windows server 2008  service pack 2","name":"Windows Server 2008  Service Pack 2","label":"windows server 2008  service pack 2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008__service_pack_2"},{"vendor":"microsoft","product":"windows server 2008 r2 service pack 1","name":"Windows Server 2008 R2 Service Pack 1","label":"windows server 2008 r2 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.1.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.1.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008_r2_service_pack_1"},{"vendor":"microsoft","product":"windows server 2008 r2 service pack 1 (server core installation)","name":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","label":"windows server 2008 r2 service pack 1 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008_r2_service_pack_1_server_core_installation"},{"vendor":"microsoft","product":"windows server 2008 service pack 2 (server core installation)","name":"Windows Server 2008 Service Pack 2 (Server Core installation)","label":"windows server 2008 service pack 2 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008_service_pack_2_server_core_installation"},{"vendor":"microsoft","product":"windows_server_2012","name":"windows server 2012","label":"windows_server_2012","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 6.2.0, < publication","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.2.0, < publication | na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"},{"vendor":"microsoft","product":"windows server 2012 r2","name":"Windows Server 2012 R2","label":"windows server 2012 r2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.3.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.3.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012_r2"},{"vendor":"microsoft","product":"windows server 2012 r2 (server core installation)","name":"Windows Server 2012 R2 (Server Core installation)","label":"windows server 2012 r2 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.3.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.3.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012_r2_server_core_installation"},{"vendor":"microsoft","product":"windows server 2012 (server core installation)","name":"Windows Server 2012 (Server Core installation)","label":"windows server 2012 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.2.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.2.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012_server_core_installation"},{"vendor":"microsoft","product":"windows_server_2016","name":"windows server 2016","label":"windows_server_2016","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"1803","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication | na | 1803","eol":null,"hubHref":"/vendor/microsoft/windows_server_2016"},{"vendor":"microsoft","product":"windows server 2016 (server core installation)","name":"Windows Server 2016 (Server Core installation)","label":"windows server 2016 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2016_server_core_installation"},{"vendor":"microsoft","product":"windows_server_2019","name":"windows server 2019","label":"windows_server_2019","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication | na","eol":null,"hubHref":"/vendor/microsoft/windows_server_2019"},{"vendor":"microsoft","product":"windows server 2019 (server core installation)","name":"Windows Server 2019 (Server Core installation)","label":"windows server 2019 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_2019_server_core_installation"},{"vendor":"microsoft","product":"windows server, version 1803  (server core installation)","name":"Windows Server, version 1803  (Server Core Installation)","label":"windows server, version 1803  (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < publication","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < publication","eol":null,"hubHref":"/vendor/microsoft/windows_server_version_1803__server_core_installation"}],"affectedCount":24,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0720","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0720","hostname":"portal.msrc.microsoft.com","tags":["X Refsource MISC","Patch","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-08-14T20:55:02.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T17:51:27.291Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T15:36:04.457Z","stale":false,"partial":false}}