Description
Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote code execution on the host operating system.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Windows Server | Microsoft / Windows Server | 2008 R2 for x64-based Systems Service Pack 1 | affected |
| Windows Server | Microsoft / Windows Server | 2008 R2 for x64-based Systems Service Pack 1 (Core installation) | affected |
| Windows Server | Microsoft / Windows Server | 2012 | affected |
| Windows Server | Microsoft / Windows Server | 2012 (Core installation) | affected |
| Windows Server | Microsoft / Windows Server | 2012 R2 | affected |
| Windows Server | Microsoft / Windows Server | 2012 R2 (Core installation) | affected |
| Windows Server | Microsoft / Windows Server | 2016 | affected |
| Windows Server | Microsoft / Windows Server | 2016 (Core installation) | affected |