CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-03-12
Microsoft Windows SMBv3 Remote Code Execution and Privilege Escalation Vulnerability (SMBGhost, CVE-2020-0796) Technical Advisory
[Affected Scope] Microsoft Windows 10 (versions 1903, 1909) and Windows Server (versions 1903, 1909) running the SMBv3 (Server Message Block 3.1.1) protocol
[Impact] Unauthenticated remote attackers can execute arbitrary code with kernel privileges (RCE) or escalate local privileges (LPE) by sending specially crafted packets, enabling wormable self-propagation across networks
[Mitigation] Apply official Microsoft security patches immediately, or implement workarounds such as disabling SMBv3 compression and blocking inbound TCP port 445