LiveActive security incident?Get immediate response
CVE Record

CVE-2019-0713: Windows Hyper-V Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.

MediumCVSS 6.8Not KEV-listedUpdated
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2019-0713 can let a privileged user inside a Hyper-V guest virtual machine crash the host server. This is an availability risk, not a reported data theft or code execution issue. The main business concern is outage of VM workloads sharing the affected host.

Executive priority

Treat this as a moderate-priority infrastructure availability issue. Patch Hyper-V hosts in the normal security maintenance cycle, faster for shared virtualization environments where guest administrators are not fully trusted.

Technical view

Microsoft describes improper validation in Hyper-V where a privileged guest OS user can run a specially crafted application that sends malicious requests to the host, causing a host crash. The update resolves conditions where Hyper-V failed to block those guest-originated requests.

Likely exposure

Exposure is limited to affected Microsoft Windows systems running Hyper-V, especially hosts with guest VMs administered by different or less-trusted users. Listed affected platforms include Windows 7/8.1/10 and Windows Server 2008 through 2016 variants.

Exploitation context

The source bundle does not show CISA KEV listing or active exploitation. The CVSS vector indicates low attack complexity and high availability impact, but exploitation requires an already privileged account on a guest VM.

Researcher notes

The evidence supports guest-to-host denial of service, not confidentiality or integrity compromise. Sources do not provide CWE, exploit details, active exploitation evidence, or product-specific KB numbers in the supplied bundle.

Mitigation direction

  • Apply Microsoft security updates for CVE-2019-0713 on affected Hyper-V hosts.
  • Use MSRC guidance to identify the applicable update for each Windows version.
  • Prioritize hosts running untrusted, shared, or multi-tenant guest workloads.
  • Limit privileged guest OS access to trusted administrators where operationally possible.

Validation and detection

  • Inventory Windows systems running Hyper-V and map them to the affected product list.
  • Confirm the applicable Microsoft security update is installed on each Hyper-V host.
  • Check whether guest administrators are separate from host administrators in your environment.
  • Review host crash or availability incidents around Hyper-V workloads for correlation.
Prepared
Confidence
high
Sources
4

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2019-0713 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Medium
CVSS
6.8 (3.1)
Known Exploited
No
Published

Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

1CVSS vectors
0Timeline events
0ADP providers
3Source links

CVSS vector scores

1 official score

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
6.8CVSS 3.1MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C2.34Primary CVE score

Vulnerability scoring details

Base CVSS 3.1 score

6.8Medium
CVSS 3.1 vector shape for CVE-2019-0713Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
MicrosoftWindows 10 Version 170310.0.0Listed
MicrosoftWindows 10 Version 180310.0.0Listed
MicrosoftWindows Server, version 1803 (Server Core Installation)10.0.0Listed
MicrosoftWindows 10 Version 170910.0.0Listed
MicrosoftWindows 10 Version 150710.0.10240.0Listed
MicrosoftWindows 10 Version 160710.0.14393.0Listed
MicrosoftWindows Server 201610.0.14393.0Listed
MicrosoftWindows Server 2016 (Server Core installation)10.0.14393.0Listed
MicrosoftWindows 7 Service Pack 16.1.0Listed
MicrosoftWindows 8.16.3.0Listed
MicrosoftWindows Server 2008 Service Pack 26.0.0Listed
MicrosoftWindows Server 2008 Service Pack 26.0.6003.0Listed
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)6.0.6003.0Listed
MicrosoftWindows Server 2008 R2 Systems Service Pack 16.1.0Listed
MicrosoftWindows Server 2008 R2 Service Pack 16.1.7601.0Listed
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)6.1.7601.0Listed
MicrosoftWindows Server 20126.2.9200.0Listed
MicrosoftWindows Server 2012 (Server Core installation)6.2.9200.0Listed
MicrosoftWindows Server 2012 R26.3.9600.0Listed
MicrosoftWindows Server 2012 R2 (Server Core installation)6.3.9600.0Listed
MicrosoftWindows 10 Version 180910.0.17763.0Listed
MicrosoftWindows 10 Version 180910.0.0Listed
MicrosoftWindows Server 201910.0.17763.0Listed
MicrosoftWindows Server 2019 (Server Core installation)10.0.17763.0Listed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.