CVE-2020-16898

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.8EPSS 11%

Published 2020-10-16Updated 2026-06-05

PoC

Vulnerability details

A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer. The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CNAmicrosoft

EPSS score history

Sources

1 links

PoC links are not available for guest users. Login to view them.

CVE Organization

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated