CVE-2015-2361

Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (buffer overflow) by leveraging guest OS privileges, aka "Hyper-V Buffer Overflow Vulnerability."

Score

CVSS 2.0 7.2 High

Status

Modified - secure@microsoft.com

Published

2015-07-14

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Windows 8.1 (Microsoft)
• Windows Server 2012 (Microsoft)

References

• http://www.securitytracker.com/id/1032897
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-068