Important CVSS 5.7 EPSS 0.07175 2018-06 archive

Executive Summary

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.

Overview

5.7
CVSS MEDIUM
Important
MS Severity
Not Exploited
MS Exploit Status
N/A
MS Exploit Likelihood
Category Denial of Service
Released Jun 12 2018
Last Updated Jun 12 2018
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.07175 — 0.93724 percentile

CVSS Vector

ATTACK VECTOR
Adjacent
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
Low
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
None
INTEGRITY
None
AVAILABILITY
High
EXPLOIT CODE MATURITY
Proof-of-Concept
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 5.1

EPSS Score

0.07175
probability of exploitation in the next 30 days
0.93724 percentile - updated 2026-08-14
View on FIRST.org

Affected Products

2 affected products
Product KB Article Severity Impact Restart Required
Windows 10 Version 1709 for x64-based Systems 4284819 (Security Update) Important Denial of Service Yes
Windows Server, version 1709 (Server Core Installation) 4284819 (Security Update) Important Denial of Service Yes

Patches

1 patch
Article Type Restart
4284819 Security Update Yes

Known Exploits

Acknowledgments

None