CVE-2020-0796

CriticalCVSS 10.0/10Known exploited (CISA KEV)Last modified Oct 1, 2026

Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Mar 12, 2020
Last modified
Oct 1, 2026
Added to CISA KEV
Feb 10, 2022
NVD status
Analyzed

Related CVEs from 2020

CVE-2020-07977.8An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoCVE-2020-07987.8An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading CVE-2020-07997.8An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbCVE-2020-08007.8An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoCVE-2020-08018.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoCVE-2020-08027.8An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoCVE-2020-08037.8An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoCVE-2020-08047.8An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoCVE-2020-08055.3<p>A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who CVE-2020-08067.8An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error RepoCVE-2020-08078.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoCVE-2020-08087.8An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runt
CVE-2020-0796: Critical severity, CVSS 10.0 | Vulnix