Windows Hyper-V Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system.</p> <p>This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p> <p>The update addresses the vulnerabilities by correcting how Windows Hyper-V handles objects in memory.</p>

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

N/A

Microsoft Windows Hyper-V 缓冲区错误漏洞

Microsoft Windows Hyper-V是美国微软（Microsoft）公司的一款可提供硬件虚拟化的工具。该软件允许创建虚拟硬盘驱动器、虚拟交换机以及许多其他虚拟设备。 Windows Hyper-V 存在安全漏洞，该漏洞源于当主机服务器上的Hyper-V无法正确验证内存中的对象时，存在特权提升漏洞。攻击者可利用该漏洞可以在目标操作系统上获得特权提升。此漏洞本身不允许运行任意代码。但是，此漏洞可能与一个或多个可在运行时利用提升特权的漏洞（例如，远程执行代码漏洞和另一个特权提升）结合使用。以下产品

N/A

缓冲区错误