10.0 Critical Exploited · ransomware

CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Known to be used

Weakness CWE-119

Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Affected products and versions

Product	Affected versions	Fixed in
Windows 10 Version 1903 for 32-bit Systems	Versions not published
Windows 10 Version 1903 for x64-based Systems	Versions not published
Windows 10 Version 1903 for ARM64-based Systems	Versions not published
Windows Server, version 1903 (Server Core installation)	Versions not published
Windows 10 Version 1909 for 32-bit Systems	Versions not published
Windows 10 Version 1909 for x64-based Systems	Versions not published
Windows 10 Version 1909 for ARM64-based Systems	Versions not published
Windows Server, version 1909 (Server Core installation)	Versions not published

References

portal.msrc.microsoft.com portal.msrc.microsoft.com
packetstormsecurity.com packetstormsecurity.com
packetstormsecurity.com packetstormsecurity.com
packetstormsecurity.com packetstormsecurity.com
packetstormsecurity.com packetstormsecurity.com
packetstormsecurity.com packetstormsecurity.com
packetstormsecurity.com packetstormsecurity.com

Timeline

Published March 12, 2020
Added to the KEV catalogue February 10, 2022
Last modified October 1, 2026

The 1035 CVEs of Windows 10 Version 1903 for 32-bit Systems →

CVE-2020-17162 Microsoft Windows Security Feature Bypass Vulnerability 8.8 High CVE-2020-17140 Windows SMB Information Disclosure Vulnerability 8.1 High CVE-2020-17139 Windows Overlay Filter Security Feature Bypass Vulnerability 7.8 High CVE-2020-17136 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High

Track this CVE