This Hyper-V vulnerability could plague Microsoft users for some time

cybersecurity, Azure, public cloud, virtual machines (VM), joint blog post, best endpoint protection, best firewall apps and services, best malware removal, Windows 7, Windows 10, Windows Server, Harpaz told, best antivirus software

New details have emerged about a critical remote code execution vulnerability in Hyper-V that was discovered by cybersecurity researchers and patched in May 2021.

The vulnerability, tracked as CVE-2021-28476 was reported to Microsoft by Guardicore Labs’ Ophir Harpaz and SafeBreach Labs’ Peleg Hadar, and was assigned a CVSS score of 9.9.

“Hyper-V is Azure’s hypervisor; for this reason, a vulnerability in Hyper-V entails a vulnerability in Azure, and can affect whole regions of the public cloud. Triggering denial of service from an Azure VM would crash major parts of Azure’s infrastructure and take down all virtual machines (VM) that share the same host,” note the researchers in a new joint blog post.

The vulnerability was found using an in-house developed fuzzer dubbed hAFL1, which the researchers will detail in next month’s Black Hat USA 2021 conference.

Businesses are slow to patch

The bug originates in Hyper-V’s network switch driver named vmswitch, and affects all versions of Windows from Windows 7 upwards, including Windows 10, as well as Windows Server 2008 through to Windows Server 2019.

The researchers note that the vulnerability was first spotted in August 2019, which suggests to them that the bug might have been in production for over a year before it was discovered and patched.

To exploit the vulnerability, the attacker must have access to a guest VM through which they can send a specially crafted packet to the Hyper-V host to trigger mayhem.

While Microsoft has ensured that the Azure service is safe from this issue, Harpaz told BleepingComputer that it is fairly common for vulnerabilities to remain unpatched for years on machines in enterprise networks.

Internet Explorer Channel Network
News Related

OTHER NEWS

William Shatner Responds To Prince William's Criticism Of Space Tourism

Recent rocket passengerWilliam Shatner responded to Prince William’s criticism of space tourism for the wealthy while the Earth continues to be plagued by environmental problems. Shatner, 90, became the oldest ... Read more »

Microsoft breaks down how it shrunk Windows 11 updates by 40%

© Windows Central Windows 11 Update Checkforupdate Dark You may need a few textbooks to understand the answer. What you need to know Microsoft has revealed the secret behind its ... Read more »

What do you want to see in our Surface Duo 2 coverage?

© Provided by Windows Central Surface Duo 2 New Settings We’re open to requests with Surface Duo 2 coverage. Microsoft’s Surface Duo 2 starts shipping on October 22, 2021. The ... Read more »

La Niña is likely back for another unpredictable winter

It’s time to gear up for a few more months of especially strange weather. Yesterday NOAA announced that La Niña conditions have been slowly brewing over the past month and ... Read more »

Moscow adds facial recognition payment system to more than 240 metro stations

© Photo by TASS\TASS via Getty Images Moscow launched “Face Pay” on Friday, a facial recognition payment system implemented in more than 240 Mosmetro stations, “the largest use of facial ... Read more »

Judge bars county clerk after voting machine passwords leaked to QAnon

In August, QAnon conspiracy theorist Ron Watkins shared a video he claimed showed ballot machines from Dominion Voting Systems could be remotely accessed to tamper with the results of a ... Read more »

GTA Remastered Trilogy system requirements dash hopes for full remake

The leaks around the GTA Remastered Trilogy are coming in hot like a six-star wanted level as we get closer to a possible announcement by the end of the year, ... Read more »

Sorry former Pentagon expert, but China is nowhere near winning the AI race

Nicolas Chaillan, the Pentagon’s former Chief Software Officer, is on a whirlwind press tour to drum up as much fervor for his radical assertion that the US has already lost ... Read more »

Busta Rhymes has questions about NFTs, and he has NFTs for sale

© Photo by Johnny Nunez/WireImage You can’t always take Busta Rhymes literally, and sometimes you shouldn’t take his questions seriously at all, but a tweet from this morning about NFTs ... Read more »

‘Nightmare' Mom Accused in Drunken Teen Sex Parties Loved ‘Power'

Ada County Sheriff’s Office The California mom accused of encouraging sex abuse at booze-fueled parties she arranged for young teens has long been known as a “liar” who leaves a ... Read more »

Stacey Solomon introduces new daughter to Loose Women co-stars

Photo credit: ITV Stacey Solomon has introduced her newborn daughter to Loose Women co-stars Nadia Sawalha and Jane Moore. In a smiling snap Nadia posted to Instagram, the three presenters ... Read more »

William Shatner Calls Prince William's Criticism of Space Race 'Inane': 'I'm Surprised'

William Shatner, Prince William Santiago Felipe/Getty; Max Mumby/Indigo/Getty Prince William and William Shatner do not see eye to eye on the space race. After his return to Earth on Wednesday, ... Read more »

Did the Samsung Galaxy Z Fold 3 just get better? Official video teases new colors

Want a Samsung foldable that’s truly your own? Soon you may be able to order a Samsung Galaxy Z Fold 3 or Samsung Galaxy Z Flip 3 and choose what ... Read more »

Steam is now banning all games that engage in cryptocurrency or NFT trading

Steam will no longer let games or other software onto its storefront if they engage in any cryptocurrency or NFT trading using blockchain technology. Cryptocurrencies and NFTs were tagged onto ... Read more »

Deaths from TB INCREASED in 2020 for the first time in 15 years

© Provided by Daily Mail MailOnline logo For the first time in more than a decade, global tuberculosis (TB) deaths increased last year due to the COVID-19 pandemic, the World ... Read more »

Windows is a ransomware magnet, according to a new VirusTotal report

© Windows Central Windows 11 Start Surfacepro Lighting Ransomware likes Windows — a lot. What you need to know VirusTotal released a report on ransomware activity. It’s loaded with statistics ... Read more »

FDA expert panel recommends all J&J vaccine recipients get a booster

An independent panel of experts for the Food and Drug Administration voted unanimously today to recommend booster shots for all Americans aged 18 years and older who received the Johnson ... Read more »

Save more than $200 on this powerful Roomba at QVC before Black Friday

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. The holidays are right around the corner and if you’re looking ... Read more »

Best CMS of 2021

The most popular Content Management Systems (CMS) platforms available today commonly began as blogging platforms, such as WordPress, and served as an early form of website builder. © Provided by ... Read more »

The best label printers for home and small businesses

Until some wonderful scientist invents a machine to instantly teleport packages around the world, we’re stuck in the era of shipping labels. Whether you’re running a high-volume online store or ... Read more »

Pandemic increased pregnant women's risk of diabetes and hypertension

© Provided by Daily Mail MailOnline logo The COVID-19 pandemic increased the risk of some adverse outcomes in pregnant women but not others, a new study finds. A joint team ... Read more »

Best 65-inch and 75-inch TV deals: 4K, OLED and smart TVs

Looking for the very best 65-inch and 75-inch TV deals? You’re in the right place. We’ve scoured the sales to find you the pick of the best big-screen TV deals ... Read more »

Hydrogen energy could be the key for ensuring the UK's Net Zero future

The UK’s continuing energy crisis has so far seen gas prices soaring to record levels, a number of suppliers going bust and significant increases in typical household energy bills. However, ... Read more »

Unnamed Tottenham duo test positive for coronavirus before Newcastle clash

Tottenham’s plans for Sunday’s Premier League trip to Newcastle have been plunged into chaos after two players tested positive for coronavirus. Both men, who trained with the group on Thursday, ... Read more »

SkEye app review

© Provided by Space SkEye review: image shows SkEye planetarium Getting out in nature doesn’t have to involve a sweaty hike or an arduous road trip. Stepping outside at night ... Read more »

New to QVC? Shop now to get $15 off your first purchase

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. Never shopped at QVC? This is the sale for you. Right ... Read more »

Dolly Parton's debut perfume keeps selling out—here's where you can buy it

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. The past two years have been quite a whirlwind for Dolly ... Read more »

Brave browser cuts off another avenue for tracking your web activity

In order to further protect users of its browser from unwanted tracking online, Brave Software has announced in a new blog post that it will add debouncing protection to Brave. ... Read more »

Celebrate Black Friday in October with savings on Gravity weighted blankets

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. The holiday season is on the way, with all the stresses ... Read more »

Ready for battle or ready for bed? New goggles can tell when soldiers need a rest

Eye goggles that detect when soldiers are nodding off or stressed are to be trialled by the Army. © Finnbarr Webster/Getty Images Soldiers from 5th Battalion, The Rifles tried out ... Read more »

Welp, Now We Have Robo-Dogs With Sniper Rifles

© Sword International The “Special Purpose Unmanned Rifle” has materialized from your Black Mirror nightmares. A new autonomous weapon system combines a quadruped robot with a sniper rifle. SPUR is ... Read more »

Alaska doctors RATION care in wake of the state's recent Covid surge

© Provided by Daily Mail MailOnline logo Doctors in Alaska are being forced to ration potentially life-saving care for COVID-19 patients in the wake of a massive surge currently hitting ... Read more »

Tesla opens Model Y pre-orders in the UK for early 2022 delivery.

Tesla will soon bring the Model Y to the UK. The company has opened pre-orders for the EV in the country, with deliveries expected to start in early 2022, according ... Read more »

Raise your TV-audio game with this 2.1-channel soundbar, now $30 off at Amazon

We may receive commission from purchases made via links on this page. Pricing and availability are subject to change. Built-in TV speakers make ears cry. Enjoy much-improved audio with a ... Read more »

‘Sensational': skeleton buried in Vesuvius eruption found at Herculaneum

Photograph: Sebastian Condrea/Getty Images The partially mutilated remains of a man buried by the AD79 eruption of Mount Vesuvius at Herculaneum, the ancient Roman town close to Pompeii, have been ... Read more »

Get early Black Friday pricing on home essentials at the Overstock Red Tag sale

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. Are you itching to switch up your home décor ahead of ... Read more »

China launches second crew on six-month mission to space station

China on Saturday launched a three-person crew for a six-month mission aboard its space station that is planned at setting a new record for the length of time spent in ... Read more »

Smartphone shipments fell due to ongoing component shortages

From NVIDIA and AMD to automakers like GM, the global chip shortage has affected nearly every industry that depends on computer components, and now it’s even hurting smartphone manufacturers. According ... Read more »

Samsung UE50AU9000 50-inch TV

We Brits, it seems, just love a good mid-range LCD TV. For whereas the US and Australia only get a single series of Samsung’s sub-QLED ‘Crystal’ range, here in the ... Read more »

Experience Incidentaloma: Ray Incident's debut album

Incidentaloma is a soundscape of creative freedom, immersing the listener in a cinematic experience. Ray Incident – the artist behind this breakthrough album – has created a musical contradiction to ... Read more »