CVE-2017-0178 — A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186

Back Back to CVE browser

MEDIUM

A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186

Published Apr 12, 2017

5.4

MEDIUM

CVSS 3.0

EPSS 1.63%

Description

A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186.

Affected products

Vendor Microsoft Corporation Product Windows Hyper-V Default
n/a
- Version
  Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft Corporation

Windows Hyper-V

n/a

Version	Status	Constraints
Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016	affected	-

Remediation

No remediation recorded yet.

Metrics

1.63% 0.01634

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.01634

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	1.63% (0.01634)	75.44th	v5 (v2026.06.15)
Jun 15, 2026	1.63% (0.01634)	73.11th	v5 (v2026.06.15)
Mar 17, 2025	0.25% (0.00250)	46.30th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	11.40th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.49th	v3 (v2023.03.01)
Mar 6, 2023	1.41% (0.01410)	72.96th	v2 (v2022.01.01)
Mar 2, 2023	1.41% (0.01410)	72.94th	v2 (v2022.01.01)
Apr 1, 2022	1.41% (0.01410)	70.94th	v2 (v2022.01.01)
Feb 4, 2022	1.41% (0.01410)	50.00th	v2 (v2022.01.01)
Feb 3, 2022	8.22% (0.08219)	85.31th	v1
Jan 6, 2022	8.22% (0.08219)	85.14th	v1
Sep 1, 2021	8.22% (0.08219)	92.75th	v1
Apr 14, 2021	8.22% (0.08219)	0.00th	v1

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

http://www.securityfocus.com/bid/97416
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0178
x_refsource_CONFIRMMitigationPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/97416		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0178		x_refsource_CONFIRMMitigationPatchVendor Advisory