CVE-2020-16894

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

A denial of service vulnerability exists when Windows Network Address Translation (NAT) on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. The update addresses the vulnerability by modifying how Windows NAT accesses the host.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows 10 Version 1607	>= 10.0.0, < publication
Microsoft	Windows Server 2016	>= 10.0.0, < publication
Microsoft	Windows Server 2016 (Server Core installation)	>= 10.0.0, < publication

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16894Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16894Patch, Vendor Advisory

Timeline

Published: Oct 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-168957.8An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who s CVE-2020-168967.5An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP CVE-2020-168975.5An information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objects in memory. An att CVE-2020-168988.8A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An att CVE-2020-168997.5A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacke CVE-2020-16906.5An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container CVE-2020-169007.0An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory. To exploit this CVE-2020-169015.0An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this v CVE-2020-169027.8An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leadi CVE-2020-169045.3An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who su CVE-2020-169056.8An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability co CVE-2020-169077.8An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory.