CVE-2019-0703

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information...

Basic Information

CVE State: PUBLISHED
Reserved Date: November 26, 2018
Published Date: April 08, 2019
Last Updated: February 07, 2025
Vendor: Microsoft
Product: Windows, Windows Server
Description: An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
Tags

CVSS Scores

CVSS v3.1

6.5 - MEDIUM

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

4.0

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

SSVC Information

Exploitation: active
Technical Impact: partial

Exploit Status

Exploited in the Wild: Yes (2022-05-23 00:00:00 UTC) Source

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0703

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-05-23 00:00:00 UTC

Timeline

CVE ID Reserved

November 26, 2018
CVE Published to Public

April 08, 2019
Added to KEVIntel

May 23, 2022