Actively exploited in the wild
Microsoft Windows SMB Information Disclosure Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-05-23. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-0703
MediumCVSS 6.5KEVSummary
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704 and CVE-2019-0821.
Risk Assessment
An attacker could obtain information that should not be disclosed, potentially facilitating further attacks against the organization's infrastructure.
Recommendation
Apply the Microsoft security updates for Windows that address this vulnerability as soon as possible.
Other vulnerabilities in Windows SMB Server
See all- CVE-2026-26128High
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-72949High
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
- CVE-2026-69403Medium
A missing authorization vulnerability in Windows SMB Server allows an authorized attacker to disclose information locally.
- CVE-2026-69374Medium
The vulnerability in Windows SMB Server is an allocation of resources without limits or throttling. It allows an authorized attacker to deny service over a network.
- CVE-2026-62800High
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
- CVE-2026-62790High
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
- CVE-2026-57089High
Use-after-free vulnerability in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.
- CVE-2026-56168Medium
A null pointer dereference in Windows SMB Server allows an authorized attacker to cause a denial of service over the network.
- CVE-2026-50360High
Incorrect implementation of the authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
- CVE-2026-24294High
A vulnerability in Windows SMB Server due to improper authentication allows local privilege escalation. An authorized attacker can exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.