CVE-2017-8664

CVE-2017-8664 is a remote code execution vulnerability in Windows Hyper-V, affecting various versions of Windows 8.1, Windows 10, Windows Server 2012, and Windows Server 2016. This flaw arises from Hyper-V's failure to properly validate input from a privileged user within a guest operating system. With a CVSS score of 8.8 (High), this vulnerability allows a local attacker with privileged access to a guest OS to achieve remote code execution on the host system. The attack complexity is low, and successful exploitation can lead to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community. It is not listed in CISA's KEV catalog.