CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-04-09
Windows SMB Server Information Disclosure Vulnerability (CVE-2019-0703) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 7, 8.1, 10 and Windows Server 2008, 2012, 2016, 2019 utilizing SMBv1/v2/v3 protocols
[Impact] An authenticated remote attacker can disclose sensitive kernel memory information by sending specially crafted SMB requests, potentially bypassing ASLR to facilitate remote code execution (RCE)
[Mitigation] Apply the official Microsoft cumulative security updates and completely disable the legacy SMBv1 protocol across the infrastructure