Every CVE Search/ Get API key

CVE-2020-0796

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3...

10.0 CriticalIn KEVPublic exploit

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

99.8%Up 6.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 10.0

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Record
CVE-2020-0796
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List 10.0

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Record
CVE-2020-0796
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
EUVDEUVD-2020-2283 10.0

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Record
EUVD-2020-2283
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-vh23-87v3-h8c6 10.0

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3...

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Record
GHSA-vh23-87v3-h8c6
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-20, CWE-119
Updated
2026-11-02
CISA KEV No score

Microsoft SMBv3 Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

Record
CVE-2020-0796
Weakness
CWE-119
Updated
2026-11-02

Affected products

Show 1 moreShow less

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubk8gege/PyLadon2019-11-19
PoC in GitHub0x25bit/CVE-2020-0796-PoC2020-03-10
PoC in GitHubButrintKomoni/cve-2020-07962020-03-11
PoC in GitHubT13nn3s/CVE-2020-07962020-03-11
PoC in GitHubjoaozietolie/CVE-2020-0796-Checker2020-03-11
PoC in GitHubly4k/SMBGhost2020-03-11
PoC in GitHubtechnion/DisableSMBCompression2020-03-11
PoC in GitHubAlmorabea/SMBGhost-WorkaroundApplier2020-03-12
PoC in GitHubDhoomralochana/Scanners-for-CVE-2020-0796-Testing2020-03-12
PoC in GitHubUraSecTeam/smbee2020-03-12
Show 21 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubawareseven/eternalghosttest2020-03-12
PoC in GitHubdickens88/cve-2020-0796-scanner2020-03-12
PoC in GitHubeerykitty/CVE-2020-0796-PoC2020-03-12
PoC in GitHubgabimarti/SMBScanner2020-03-12
PoC in GitHubioncodes/SMBGhost2020-03-12
PoC in GitHubkn6869610/CVE-2020-07962020-03-12
PoC in GitHublaolisafe/CVE-2020-07962020-03-12
PoC in GitHubnetscylla/SMBGhost2020-03-12
PoC in GitHubwneessen/SMBCompScan2020-03-12
PoC in GitHubxax007/CVE-2020-0796-Scanner2020-03-12
PoC in GitHubBinaryShadow94/SMBv3.1.1-scan---CVE-2020-07962020-03-13
MetasploitSMBv3 Compression Buffer Overflow2020-03-13
MetasploitSMBv3 Compression Buffer Overflow2020-03-13
PoC in GitHubvysecurity/CVE-2020-07962020-03-13
Exploit-DBMicrosoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Buffer Overflow (PoC)2020-03-14
PoC in GitHubGuoKerS/aioScan_CVE-2020-07962020-03-14
PoC in GitHubw1ld3r/SMBGhost_Scanner2020-03-14
PoC in GitHubwsfengfan/CVE-2020-07962020-03-14
Exploit-DBMicrosoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Local Privilege Escalation2020-03-30
Exploit-DBMicrosoft Windows - 'SMBGhost' Remote Code Execution2020-06-02
NucleiMicrosoft SMBv3 - Remote Code Execution

Plus 61 more. The full list has every link.

History

History
RecordedChangedSources
exploitation
exploits, exploits_more
exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-0796 is a critical vulnerability (CVSS 10.0) in Microsoft Smbv3, published March 12, 2020. CISA lists it as known to be exploited, since February 10, 2022. EUVD reports exploitation since February 10, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 99.8%, the 99th percentile. No source names a fixed version.

References

Show 4 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open