55 matches found
Blackash-CVE-2025-33073
✨ CVE-2025-33073: Windows SMB 远程代码执行漏洞 🚨 🔥 高危：经身份验证的远程代码执行 🔥 Windows SMB 客户端中的访问控制不当 CWE-284 🛡️ 核心信息一览...
windows-smb-vulnerability-framework-cve-2025-33073
Marco de Investigación de Vulnerabilidades del Cliente SMB de Windows Autor: cyberseallll Creado: 2025 Descripción General Desarrollé este marco de investigación para analizar y comprender CVE-2025-33073, una vulnerabilidad crítica de Elevación de Privilegios en el Cliente SMB de Windows. Esta...
CVE-2025-33073
CVE-2025-33073 — Windows SMB 客户端 NTLM 反射权限提升 由 Sentinel AI Defense 撰写的研究报告。仅限防御性分析——此处不发布任何可用的利用代码或 PoC。 Windows SMB 客户端中存在一个不当的访问控制缺陷，它使原本被认为已缓解的 NTLM 反射技术重新复活——攻击者可借此诱使主机将高权限身份验证上下文反射回自身，并提升至 NT AUTHORITY\SYSTEM 权限。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2025-33073-smb-reflection.html 概...
CVE-2026-72936
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69618
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...
CVE-2026-69572
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
CVE-2026-69544
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-72936
CVE-2026-72936 is a use-after-free vulnerability in the Windows SMB Client that allows an unauthorized, remote attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network attack vector with high complexity, no required privileges, and n...
EUVD-2026-73664
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-73551
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...
CVE-2026-69618
CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...
EUVD-2026-73137
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-69544
CVE-2026-69544 is a heap-based buffer overflow in the Windows SMB Client that allows an authorized attacker with low local privileges to achieve local privilege escalation . The attack vector is local with low complexity and requires no user interaction , rated CVSS 3.1: 7.8 (HIGH) with high impa...
EUVD-2026-73020
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
CVE-2026-69572
CVE-2026-69572 is an out-of-bounds read vulnerability in the Windows SMB Client that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 5.7 (Medium) with vector AV:N/AC:L/PR:L/UI:R, indicating a network attack with low complexity, low req...
Windows SMB Client Remote Code Execution Vulnerability
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...
Windows SMB Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-62799
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
