CVE-2017-0168

Published: Apr 12, 2017Modified: May 13, 2026

5.8

Vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Exploitability: 1.3 / Impact: 4.0

Source: NVD

Description

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2 host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-0169.

Affected (5)

Products: Microsoft: Windows 8.1, Windows Server 2008, Windows Server 2012

3 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 8.1	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	Version r2 sp1
Microsoft Windows Server 2012	All versions
Microsoft Windows Server 2012	Version r2