Vulnerability Spotlight: Multiple vulnerabilities in RemoteFX affects, AMD, Intel chips
Summary: Cisco Talos discovered multiple vulnerabilities in Intel's Graphics Accelerator Driver (IGC64.DLL version 26.20.100.7584) and AMD's Radeon DirectX 11 driver (atidxx64.dll 26.20.15019.19000), triggered by specially crafted shader files and reachable through the RemoteFX feature in Hyper-V to perform a guest-to-host escape. Microsoft disabled RemoteFX vGPU in Hyper-V as part of that month's Patch Tuesday, AMD released its own patches, and Intel declined to issue an update or CVEs, so the CVEs listed apply only to Microsoft's Hyper-V instance.
What you should know: A guest-to-host escape means an attacker who lands in one virtual machine can execute code on the Hyper-V host inside the rdvgm.exe process, and Intel's refusal to patch or issue CVEs leaves that path open wherever RemoteFX was enabled.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-1036CVE-2020-1040
- Related
- CVE-2020-1040: Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026