CVE-2020-0796

תיאור (מקור, אנגלית)

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

מדדים

CVSS 3.1

10.0 (CRITICAL) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — סבירות ניצול

100% (אחוזון 100) נכון ל-4/8/2026

CWE

CWE-119

מוצרים מושפעים

microsoft: windows 10 1903; microsoft: windows 10 1909; microsoft: windows server 1903; microsoft: windows server 1909

קישורים

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 PatchVendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 PatchVendor Advisory
• http://packetstormsecurity.com/files/156732/Microsoft-Windows-SMB-3.1.1-Remote‮… ExploitThird Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/157110/SMBv3-Compression-Buffer-Overflow.‮… ExploitThird Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/156732/Microsoft-Windows-SMB-3.1.1-Remote‮… ExploitThird Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/157110/SMBv3-Compression-Buffer-Overflow.‮… ExploitThird Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/156731/CoronaBlue-SMBGhost-Microsoft-Wind‮… Third Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/156980/Microsoft-Windows-10-SMB-3.1.1-Loc‮… Third Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/157901/Microsoft-Windows-SMBGhost-Remote-‮… Third Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/158054/SMBleed-SMBGhost-Pre-Authenticatio‮… Third Party AdvisoryVDB Entry