CVE-2019-0630

HIGH EXPLOITED

Windows SMBv2 - Remote Code Execution via Malicious Request Handling

Title source: llm

Exploitation Summary

CVE-2019-0630 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/106876

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0630

Scores

CVSS v3 8.8

EPSS 0.1784

EPSS Percentile 96.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2019-04-01

CWE

CWE-19

Status published

Products (17)

microsoft/windows_10

microsoft/windows_10 1607

microsoft/windows_10 1703

microsoft/windows_10 1709

microsoft/windows_10 1803

microsoft/windows_10 1809

microsoft/windows_7

microsoft/windows_8.1

microsoft/windows_rt_8.1

microsoft/windows_server_2008 (2 CPE variants)

... and 7 more

Published Mar 05, 2019

Tracked Since Feb 18, 2026