CVE-2017-0095

Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0021.

• CWE-20

• http://www.securityfocus.com/bid/96699Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037999
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0095Patch, Vendor Advisory
• http://www.securityfocus.com/bid/96699Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037999
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0095Patch, Vendor Advisory

Published

Mar 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0089Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0090Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0091Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0092Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…
• CVE-2017-0093A remote code execution vulnerability in Microsoft Edge exis…
• CVE-2017-0094A remote code execution vulnerability exists in the way affe…
• CVE-2017-0096Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 …
• CVE-2017-0097Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 …
• CVE-2017-0098Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607; and Wi…
• CVE-2017-0099Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 …
• CVE-2017-0100A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Wi…
• CVE-2017-0101The kernel-mode drivers in Transaction Manager in Microsoft …7.8