CVE-2020-0796

Act now ● On CISA KEV — actively exploited used in ransomware

Actively exploited — on the CISA KEV list.

CVSS base

10.0 CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — probability of exploitation (30 days)

99.8%

100.0th percentile

CISA KEV

Listed

Added 2022-02-10 · patch by 2022-08-10

Weakness / dates

CWE-119

Published 2020-03-12 · modified 2026-08-12

CVSS breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector	N	Network
Attack Complexity	L	Low
Privileges Required	N	None
User Interaction	N	None
Scope	C	Changed
Confidentiality	H	High
Integrity	H	High
Availability	H	High

Timeline

2020-03-12 — Published (NVD)
2022-02-10 — Added to CISA KEV (actively exploited)
2022-08-10 — CISA patch-by deadline
2026-08-12 — Last modified (NVD)

Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Affected

microsoft

References

Official: NVD · CVE.org