CVE-2020-0796

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Affected products

Server Message Block, Windows, Windows 10, Windows Server

Microsoft Windows 10 1903

All versions

Microsoft Windows 10 1909

All versions

Microsoft Windows Server 1903

All versions

Microsoft Windows Server 1909

All versions

Fix

Available

CVSS 3.1

10.0 CRITICAL

EPSS

99.8% (100th percentile)

Weakness

CWE-119

NVD status

Analyzed

Published

2020-03-12