Apply updates per vendor instructions.
Evidence dossier
CVE-2019-0703
CVE-2019-0703
56.2–77.5Priority evidence range
gen-56ccdaf9Normalized restatement
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
- State
- PUBLISHED
- Published
- Apr 8, 2019
- Updated
- Oct 21, 2025
- Evidence coverage
- 72%
2026-07-18 · v2026.06.15 · percentile 95.0%
Distinct CVSS assessments remain side by side; none are averaged.
Source comparison
Who said what
microsoftoriginal assertion
container
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
Jul 19, 2026Original evidence ↗
CISA KEVoriginal assertion
observed_exploitation
Microsoft Windows SMB Information Disclosure Vulnerability
Jul 19, 2026Original evidence ↗
FIRST EPSSoriginal assertion
model_probability
Probability 0.096400000000; percentile 0.949510000000
Jul 19, 2026Original evidence ↗
Applicability
Cited product scope
MicrosoftWindows
[{"status": "affected", "version": "7 for 32-bit Systems Service Pack 1"}, {"status": "affected", "version": "7 for x64-based Systems Service Pack 1"}, {"status": "affected", "version": "8.1 for 32-bit systems"}, {"status": "affected", "version": "8.1 for x64-based systems"}, {"status": "affected", "version": "RT 8.1"}, {"status": "affected", "version": "10 for 32-bit Systems"}, {"status": "affected", "version": "10 for x64-based Systems"}, {"status": "affected", "version": "10 Version 1607 for 32-bit Systems"}, {"status": "affected", "version": "10 Version 1607 for x64-based Systems"}, {"status": "affected", "version": "10 Version 1703 for 32-bit Systems"}, {"status": "affected", "version": "10 Version 1703 for x64-based Systems"}, {"status": "affected", "version": "10 Version 1709 for 32-bit Systems"}, {"status": "affected", "version": "10 Version 1709 for x64-based Systems"}, {"status": "affected", "version": "10 Version 1803 for 32-bit Systems"}, {"status": "affected", "version": "10 Version 1803 for x64-based Systems"}, {"status": "affected", "version": "10 Version 1803 for ARM64-based Systems"}, {"status": "affected", "version": "10 Version 1809 for 32-bit Systems"}, {"status": "affected", "version": "10 Version 1709 for ARM64-based Systems"}]unknownMicrosoftWindows Server
[{"status": "affected", "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"}, {"status": "affected", "version": "n/a"}]unknownUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_1709:-:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*supportedAssessments
CVSS by origin
nvd@nist.govCVSS 3.1 · role Primary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nnvd@nist.govCVSS 2.0 · role Primary
AV:N/AC:L/Au:S/C:P/I:N/A:N134c704f-9b21-4f2e-91b3-4a467353bcc0CVSS 3.1 · role Secondary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCISA-ADPCVSS 3.1 · role unknown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NLimitations and unknowns
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.