CVE-2019-0722
Estado: ModificadaAlta (8.8)—
Existe una vulnerabilidad en una ejecución del código remota, cuando Windonws Hyper-V en el servidor falla para validar correctamente entradas de un usuario autorizado, o un sistema operativo invitado, conocido como Windows Hyper-V Remote Code Execution Vulnerability, Este CVE ID es único desde CVE-2019-0620, CVE-2019-0709
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.72%
- Percentil entre todas las CVEs puntuadas: 92
- Fecha de la puntuación: 9/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (8)
CWE
- CWE-20
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-0722",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"authentication": "SINGLE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "secure@microsoft.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "secure@microsoft.com",
"affectedData": [
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1903 for x64-based Systems",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"Unknown"
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1903 for ARM64-based Systems",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"Unknown"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server, version 1903 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1703",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1803",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems",
"ARM64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server, version 1803 (Server Core Installation)",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1809",
"versions": [
{
"status": "affected",
"version": "10.0.17763.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1809",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"ARM64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2019",
"versions": [
{
"status": "affected",
"version": "10.0.17763.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2019 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "10.0.17763.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1709",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems",
"ARM64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1507",
"versions": [
{
"status": "affected",
"version": "10.0.10240.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1607",
"versions": [
{
"status": "affected",
"version": "10.0.14393.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2016",
"versions": [
{
"status": "affected",
"version": "10.0.14393.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2016 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "10.0.14393.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 7 Service Pack 1",
"versions": [
{
"status": "affected",
"version": "6.1.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows 8.1",
"versions": [
{
"status": "affected",
"version": "6.3.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems",
"ARM64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 Service Pack 2",
"versions": [
{
"status": "affected",
"version": "6.0.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"IA64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 Service Pack 2",
"versions": [
{
"status": "affected",
"version": "6.0.6003.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "6.0.6003.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 R2 Systems Service Pack 1",
"versions": [
{
"status": "affected",
"version": "6.1.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"IA64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 R2 Service Pack 1",
"versions": [
{
"status": "affected",
"version": "6.1.7601.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "6.1.7601.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012",
"versions": [
{
"status": "affected",
"version": "6.2.9200.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "6.2.9200.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 R2",
"versions": [
{
"status": "affected",
"version": "6.3.9600.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 R2 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "6.3.9600.0",
"lessThan": "publication",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
}
]
}
],
"published": "2019-06-12T14:29:01.307",
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0722",
"source": "secure@microsoft.com"
},
{
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0722",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.\nAn attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.\nThe security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad en una ejecución del código remota, cuando Windonws Hyper-V en el servidor falla para validar correctamente entradas de un usuario autorizado, o un sistema operativo invitado, conocido como Windows Hyper-V Remote Code Execution Vulnerability, Este CVE ID es único desde CVE-2019-0620, CVE-2019-0709"
}
],
"lastModified": "2026-06-17T02:08:46.447",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "084984D5-D241-497B-B118-50C6C1EAD468"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "2704BDB7-C9DC-42A6-925D-798568E22D6D"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "1B3308A0-1699-4A4A-8D6B-AB4E4C825C95"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "1981BA0D-0920-40C0-8A6A-5D5A1B221560"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "6CF580BA-6938-40F6-9D86-F43044A6BACA"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "2487AF09-F003-482A-BD42-31F6AEAA033F"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*",
"vulnerable": true,
"matchCriteriaId": "FFFD8C6B-7A46-484C-8701-81D58AB1C2CF"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*",
"vulnerable": true,
"matchCriteriaId": "B320A104-9037-487E-BC9A-62B4A6B49FD0"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CAACE735-003E-4ACB-A82E-C0CF97D7F013"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B921FDB-8E7D-427E-82BE-4432585080CF"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secure@microsoft.com"
}