CVE-2017-0095: Microsoft Windows 10

High severity, CVSS 7.6. EPSS: 3.9% chance of exploitation in the next 30 days.

Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0021.

Affected products

• Microsoft Windows 10: affected versions not specified; version 1511 only; version 1607 only
• Microsoft Windows Server 2016: any version

Published 2017-03-17. Last modified 2026-06-17.