High (8.8) in microsoft. EPSS 44% chance of exploitation in the next 30 days.
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.
Severity
CVSS 3.1
8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
44% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)