Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-28476
9.9CRITICAL
Key Information:
- Vendor
- Microsoft
- Status
- Vendor
- CVE Published:
- 11 May 2021
Badges
πΎ Exploit Existsπ‘ Public PoCπ£ EPSS 13%
Summary
Windows Hyper-V Remote Code Execution Vulnerability
Affected Version(s)
Windows 10 Version 1507 x64-based Systems 10.0.0 < 10.0.10240.18931
Windows 10 Version 1607 x64-based Systems 10.0.0 < 10.0.14393.4401
Windows 10 Version 1803 x64-based Systems 10.0.0 < 10.0.17134.2207
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
EPSS Score
13% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed
Timeline
- π‘
Public PoC available
- πΎ
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database5 Proof of Concept(s)