What is CVE-2021-38672?

CVE-2021-38672 is a security advisory published by Microsoft Security Response Center (MSRC) with Critical severity. Windows Hyper-V Remote Code Execution Vulnerability

Which CVE IDs does CVE-2021-38672 cover?

CVE-2021-38672 covers the following CVE IDs: CVE-2021-38672. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-38672?

CVE-2021-38672 has a CVSS v3 base score of 8.0, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-38672?

CVE-2021-38672 affects 3 products, including: Windows 11 version 21H2 for x64-based Systems; Windows Server 2022; Windows Server 2022 (Server Core installation).

CVE-2021-38672CriticalCVSS 8.0

Windows Hyper-V Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 12, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-38672 →

📋 Description

How could an attacker exploit this vulnerability? For successful exploitation, this vulnerability could allow a malicious guest VM to read kernel memory in the host. To trigger this vulnerability the guest VM requires a memory allocation error to first occur on the guest VM. This bug could be used for a VM escape from guest to host.

🎯 Affected products3

Windows 11 version 21H2 for x64-based Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)

✅ Remediation

KB5006699 (Security Update) — fixed build 10.0.20348.288 KB5006674 (Security Update) — fixed build 10.0.22000.258

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38672
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006699
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5006674