CVE-2020-16898

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer. The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows 10 Version 1803	>= 10.0.0, < publication
Microsoft	Windows 10 Version 1809	>= 10.0.0, < publication
Microsoft	Windows Server 2019	>= 10.0.0, < publication
Microsoft	Windows Server 2019 (Server Core installation)	>= 10.0.0, < publication
Microsoft	Windows 10 Version 1909	>= 10.0.0, < publication
Microsoft	Windows Server, version 1909 (Server Core installation)	>= 10.0.0, < publication
Microsoft	Windows 10 Version 1709 for 32-bit Systems	>= 10.0.0, < publication
Microsoft	Windows 10 Version 1709	>= 10.0.0, < publication
Microsoft	Windows 10 Version 1903 for 32-bit Systems	>= 10.0.0, < publication
Microsoft	Windows 10 Version 1903 for x64-based Systems	>= 10.0.0, < publication
Microsoft	Windows 10 Version 1903 for ARM64-based Systems	>= 10.0.0, < publication
Microsoft	Windows Server, version 1903 (Server Core installation)	>= 10.0.0, < publication
Microsoft	Windows 10 Version 2004	>= 10.0.0, < publication
Microsoft	Windows Server version 2004	>= 10.0.0, < publication

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898Patch, Vendor Advisory

Timeline

Published: Oct 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-168997.5A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacke CVE-2020-16906.5An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container CVE-2020-169007.0An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory. To exploit this CVE-2020-169015.0An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this v CVE-2020-169027.8An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leadi CVE-2020-169045.3An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who su CVE-2020-169056.8An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability co CVE-2020-169077.8An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory.CVE-2020-169087.8An elevation of privilege vulnerability exists in Windows Setup in the way it handles directories. A locally authenticated attacke CVE-2020-169097.8An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability co CVE-2020-16915.4In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site script CVE-2020-169106.2A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an att