VULNERABILITY INTELLIGENCE
CVE-2015-2361
CVSS score7.2 HIGH
EPSS probability1.88%
CISA KEVNot currently listed
Published2015-07-14
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (buffer overflow) by leveraging guest OS privileges, aka "Hyper-V Buffer Overflow Vulnerability."
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer