CVE-2020-0890
Windows Hyper-V Denial of Service Vulnerability
- Published
- Sep 11, 2020
- Updated
- Aug 4, 2024
- Assigning CNA
- microsoft
- Evidence observed
- Aug 8, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HLow · next 30 days
- Percentile
- 86.4%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p> <p>The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests.</p>
Sources
CVE-2020-0890 | Windows Hyper-V Denial of Service Vulnerability proof-of-concept code
- gerhart01PoC
CVE-2020-0890 | Windows Hyper-V Denial of Service Vulnerability proof-of-concept code
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.