CVE-2020-0796

Microsoft SMBv3 Remote Code Execution Vulnerability

Severity: critical
CVSS v3: 10
EPSS percentile: 100%
Known exploited: yes (CISA KEV)
Vendor: Microsoft
Product: SMBv3
Published: 2022-02-10
Modified: 2026-10-01

Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

NVD record

Informational only. Not a warranty of security, completeness or fitness for any purpose. Derived from NVD, CISA KEV, FIRST.org EPSS and vendor advisories (CVE Program List v5); those sources change continuously and may be incomplete or incorrect. Verify every remediation against the vendor advisory before acting. Absence of a finding is not evidence that no vulnerability exists. Not endorsed by NVD, CISA, FIRST or any vendor named.

Raw record

{
  "id": "CVE-2020-0796",
  "title": "Microsoft SMBv3 Remote Code Execution Vulnerability",
  "description": "A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.",
  "severity": "critical",
  "cvss": 10,
  "epss": 100,
  "kev": 1,
  "vendor": "Microsoft",
  "product": "SMBv3",
  "published": "2022-02-10",
  "modified": "2026-10-01T20:17:17.727",
  "source": "nvd",
  "remediation": [],
  "disclaimer": "Informational only. Not a warranty of security, completeness or fitness for any purpose. Derived from NVD, CISA KEV, FIRST.org EPSS and vendor advisories (CVE Program List v5); those sources change continuously and may be incomplete or incorrect. Verify every remediation against the vendor advisory before acting. Absence of a finding is not evidence that no vulnerability exists. Not endorsed by NVD, CISA, FIRST or any vendor named."
}