CVE-2020-0684

—

CVSS 3.1

8.8 high

EPSS

9%p95

Published

Mar 12, 2020 (Mar 12, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: windows 10, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.0%)

In the news4 stories

Microsoft’s Patch Tuesday updates for March 2020 fix 115 issues

Security AffairsMar 11, 09:56 UTC · Mar 11, 2020Vulnerability CVE-2020-0852 CVE-2020-0684 CVE-2020-0833+3 CVEs

Microsoft Issues March 2020 Updates to Patch 115 Security Flaws

The Hacker NewsMar 11, 08:31 UTC · Mar 11, 2020Vulnerability in the wildCVE-2020-0684 CVE-2020-0852 CVE-2020-0833+4 CVEs

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

Cisco TalosMar 10, 17:23 UTC · Mar 10, 2020Vulnerability CVE-2020-0796 CVE-2020-0684 CVE-2020-0801+114 CVEs

March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none

Help Net SecurityMar 10, 00:00 UTC · Mar 10, 2020Vulnerability in the wildCVE-2020-0852 CVE-2020-0684 CVE-2020-0872+3 CVEs