CVE-2020-1118
Last modified
CVE-2020-1118 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges, aka 'Microsoft Windows Transport Layer Security Denial of Service Vulnerability'.. EPSS estimates a 16.13% chance of exploitation in the next 30 days.
Description
A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges, aka 'Microsoft Windows Transport Layer Security Denial of Service Vulnerability'.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 | 1709 |
| Microsoft | Windows 10 | 1803 |
| Microsoft | Windows 10 | 1809 |
| Microsoft | Windows 10 | 1903 |
| Microsoft | Windows 10 | 1909 |
| Microsoft | Windows Server 2019 | All versions |
| Microsoft | Windows Server 2019 | 1903 |
| Microsoft | Windows Server 2019 | 1909 |
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1118Patch, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1118Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-1118?
How severe is CVE-2020-1118?
How do I fix CVE-2020-1118?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-11174u'Array index underflow issue in adsp driver due to improper…7.8
- CVE-2020-11175u'Use after free issue in Bluetooth transport driver when a …7.8
- CVE-2020-11176While processing server certificate from IPSec server, certi…9.8
- CVE-2020-11177User can overwrite Security Code NV item without knowing cur…8.8
- CVE-2020-11178Trusted APPS to overwrite the CPZ memory of another use-case…7.8
- CVE-2020-11179Arbitrary read and write to kernel addresses by temporarily …7
- CVE-2020-11180Out of bound access in computer vision control due to improp…7.8
- CVE-2020-11181Out of bound access issue while handling cvp process control…7.8
- CVE-2020-11182Possible heap overflow while parsing NAL header due to lack …9.8
- CVE-2020-11183A process can potentially cause a buffer overflow in the dis…6.7
- CVE-2020-11184u'Possible buffer overflow will occur in video while parsing…9.8
- CVE-2020-11185Out of bound issue in WLAN driver while processing vdev resp…7.8
Are you affected by CVE-2020-1118?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST