CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-07-14
Microsoft Hyper-V RemoteFX vGPU Input Validation Vulnerability Leading to Remote Code Execution (CVE-2020-1040)
[Affected Scope] Windows Server host and guest virtual machine (VM) environments with Hyper-V RemoteFX vGPU enabled
[Impact] An authenticated attacker on a guest OS can bypass VM isolation boundaries to execute arbitrary code on the host OS, leading to full host compromise
[Mitigation] Apply official Microsoft security patches immediately, or disable the deprecated and high-risk RemoteFX vGPU feature in favor of Discrete Device Assignment (DDA)