Microsoft has released debugging symbols for many of the core components of Hyper-V. Using these debugging symbols, security researchers can analyze them for vulnerabilities in order to submit them to the Hyper-V bug bounty program.
The Hyper-V bug bounty program offers rewards ranging from $5,000 USD to $250,000 USD, with the highest amount awarded for remote code execution vulnerabilities that enables a guest virtual machines to escape or compromise the host or another guest virtual machine.
According to Microsoft's announcement, not all symbols are being released.
"We would like to share with the security community that we have now released debugging symbols for many of the core components in Hyper-V, with some exceptions such as the hypervisor where we would like to avoid our customers taking a dependency on undocumented hypercalls for instance." - Microsoft
A full list of the released debugging symbols for Hyper-V can be found here and you can access these symbols by connecting to Microsoft's Symbol Server or by downloading them using symchk.exe.
Post a Comment Community Rules
You need to login in order to post a comment
Not a member yet? Register Now