Not rated
CVE-2020-0645 A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka…
Description
A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows | Versions not published | |
| Windows Server | 2019 | No fix stated |
| Windows Server | 2016 | No fix stated |
| Windows Server | 2012 | No fix stated |
| Windows 10 Version 1903 for 32-bit Systems | Versions not published | |
| Windows 10 Version 1903 for x64-based Systems | Versions not published | |
| Windows 10 Version 1903 for ARM64-based Systems | Versions not published | |
| Windows Server, version 1903 (Server Core installation) | Versions not published | |
| Windows 10 Version 1909 for 32-bit Systems | Versions not published |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 Version 1909 for x64-based Systems | Versions not published | |
| Windows 10 Version 1909 for ARM64-based Systems | Versions not published | |
| Windows Server, version 1909 (Server Core installation) | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows
The 829 CVEs of Windows →
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy
7.4
High
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended…
7.4
High
CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
7.0
High
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Medium