Back to the CVE list
CVE-2020-0796 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Memory buffer overflow in Microsoft Windows 10 Version 1903 For 32 Bit Systems

CVSS score

10.0

EPSS probability

%99.8

Risk score

20.0

Published

6 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

linusboz12345-sys/cve-2020-0796-scanner

Public PoCSource updated: 26.09.2026 16:05:35

thai1012/cve-2020-0796

Public PoCSource updated: 04.02.2026 12:04:23

Lightweight PoC and Scanner for CVE-2020-0796 without authentication.

Public PoCSource updated: 14.04.2026 08:18:11

nyambiblaise/Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE

Public PoCSource updated: 30.12.2025 00:06:20

CVE-2020-0796 (SMBGhost) is a critical RCE vulnerability in Windows 10 SMBv3 protocol. It allows attackers to execute code remotely via crafted SMB packets, making it wormable. Affects Windows 10 v1903/v1909 and Server 2019. Exploit targets srv2.sys via buffer overflow

Public PoCSource updated: 08.04.2026 09:48:14

esmwaSpyware/DoS-PoC-for-CVE-2020-0796-SMBGhost-

Public PoCSource updated: 06.08.2025 07:06:10

maqeel-git/CVE-2020-0796

Public PoCSource updated: 14.06.2025 03:52:19

tdevworks/CVE-2020-0796-SMBGhost-Exploit-Demo

Public PoCSource updated: 30.05.2025 09:58:49

Microsoft Windows - 'SMBGhost' Remote Code Execution

Exploit referenceSource updated: 02.06.2020 00:00:00

Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Local Privilege Escalation

Exploit referenceSource updated: 30.03.2020 00:00:00

Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Buffer Overflow (PoC)

Exploit referenceSource updated: 14.03.2020 00:00:00

Nuclei: Microsoft SMBv3 - Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-0796"