CVE-2020-1118

HIGH

Windows 10 and Windows Server 2019 - Denial of Service via TLS Key Exchange Handling

Title source: llm
STIX 2.1

Description

A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges, aka 'Microsoft Windows Transport Layer Security Denial of Service Vulnerability'.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.1613
EPSS Percentile 96.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (8)
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_10 1909
microsoft/windows_server_2019
microsoft/windows_server_2019 1903
microsoft/windows_server_2019 1909
Published May 21, 2020
Tracked Since Feb 18, 2026