CVE-2020-16996

—

CVSS 3.1

6.5 medium

EPSS

2%p83

Published

Dec 10, 2020 (Dec 10, 2020)

Modified

Jun 17, 2026

Description

Kerberos Security Feature Bypass Vulnerability

Vendors: microsoft
Products: windows server 2012, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news3 stories

Microsoft December 2020 Patch Tuesday fixes 58 bugs, 9 are critical

Security AffairsDec 9, 08:50 UTC · Dec 9, 2020Vulnerability in the wildCVE-2020-17132 CVE-2020-17121 CVE-2020-17095+2 CVEs

60

Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws

The Hacker NewsDec 9, 04:58 UTC · Dec 9, 2020Exploit / PoC in the wildCVE-2020-17132 CVE-2020-17118 CVE-2020-17121+4 CVEs

60

A light December 2020 Patch Tuesday for a no-stress end of the year

Help Net SecurityDec 8, 00:00 UTC · Dec 8, 2020Vulnerability in the wildCVE-2020-17132 CVE-2020-16875 CVE-2020-17095+2 CVEs

60