CVE-2021-26416HighCVSS 7.7
Windows Hyper-V Denial of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
How can an attacker exploit this vulnerability? An attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. This can cause the host OS to crash by sending specially crafted request.
🎯 Affected products12
- Windows 10 Version 1607 for x64-based Systems
- Windows 10 Version 1809 for x64-based Systems
- Windows 10 Version 1909 for x64-based Systems
- Windows 10 Version 2004 for x64-based Systems
- Windows 10 Version 20H2 for x64-based Systems
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server, version 1909 (Server Core installation)
- Windows Server, version 2004 (Server Core installation)
- Windows Server, version 20H2 (Server Core Installation)
✅ Remediation
KB5001342 (Security Update) KB5001337 (Security Update) KB5001330 (Security Update) KB5001347 (Security Update)
🔗 References (9)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26416
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5001342
- referencehttps://support.microsoft.com/help/5001342
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5001337
- referencehttps://support.microsoft.com/help/5001337
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5001330
- referencehttps://support.microsoft.com/help/5001330
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5001347
- referencehttps://support.microsoft.com/help/5001347