VulnerabilityModified

CVE-2017-0193

HIGH 7.8EPSS 1.10%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to gain elevated privileges on a target guest operating system when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability".

CVSS 3.0: 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.10% probability · 65th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-755
Affected: microsoft/windows 10 · microsoft/windows 7 · microsoft/windows 8.1 · microsoft/windows server 2008 · microsoft/windows server 2012 · microsoft/windows server 2016
Source: secure@microsoft.com

EPSS trend

EPSS 1.1% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

http://www.securityfocus.com/bid/98878Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038670
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0193Mitigation, Patch, Vendor Advisory
http://www.securityfocus.com/bid/98878Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038670
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0193Mitigation, Patch, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.