PT-2024-2079

CVE-2024-21407

Published

2024-03-12

Updated

2025-05-14

Description by

CVSS 3.1

8.1

High

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Hyper-V (affected versions not specified)

Description The vulnerability is related to insufficient input validation in the Windows Hyper-V system, allowing a remote attacker to execute arbitrary code. This issue can be exploited by an attacker acting remotely, potentially impacting the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Australeo

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

CWE-20: Improper Input Validation

Related identifiers