CVE-2020-1301

—

CVSS 3.1

8.8 high

EPSS

44%p99

Published

Jun 9, 2020 (Jun 9, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: windows 10, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (43.8%)

In the news3 stories

Microsoft Patch Tuesday, June 2020 Edition

Krebs on SecurityJun 15, 00:00 UTC · Jun 15, 2020Vulnerability in the wildCVE-2020-1301 CVE-2020-0796 CVE-2020-1225+2 CVEs

Microsoft Patch Tuesday for June 2020 — Snort rules and prominent vulnerabilities

Cisco TalosJun 10, 00:49 UTC · Jun 10, 2020Vulnerability in the wildCVE-2020-1248 CVE-2020-1225 CVE-2020-1226+2 CVEs

June 2020 Patch Tuesday: Microsoft fixes record monthly number of CVEs

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2020Vulnerability in the wildCVE-2020-1299 CVE-2020-1300 CVE-2020-1281+6 CVEs