1992 matches found
windows-smb-vulnerability-framework-cve-2025-33073
Windows SMB Client Vulnerability Research Framework Author: cyberseallll Created: 2025 Overview I developed this research framework to analyze and understand CVE-2025-33073, a critical Windows SMB Client Elevation of Privilege vulnerability. This implementation provides comprehensive tools for...
cifswitch-check
cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 โ a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...
CVE-2026-46243
๐จ CVE-2026-46243 - CIFSwitch Linux Kernel Local Privilege Escalation LPE Local Privilege Escalation vulnerability affecting the Linux Kernel CIFS/SMB client. ๐ Overview CVE-2026-46243 is a Local Privilege Escalation LPE vulnerability within the Linux Kernel's CIFS/SMB client. Improper validation ...
Important: Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
kernel: smb: client: validate the whole DACL before rewriting it in cifsacl
A flaw was found in the Linux kernel's Server Message Block SMB client, specifically within the cifsacl functionality. A malicious SMB server could provide a malformed Discretionary Access Control List DACL that claims to contain more Access Control Entries ACEs than are actually present. This...
kernel: smb: client: validate absolute native symlink targets before NT fixups
A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
A flaw was found in the Linux kernel's Server Message Block SMB client. The coalescet2 function processes server-supplied DataOffset fields without proper validation against buffer boundaries. A remote attacker could exploit this by crafting malicious SMB responses. This could lead to out-of-boun...
kernel: smb: client: validate absolute native symlink targets before NT fixups
A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
A flaw was found in the Linux kernel's Server Message Block SMB client. The coalescet2 function processes server-supplied DataOffset fields without proper validation against buffer boundaries. A remote attacker could exploit this by crafting malicious SMB responses. This could lead to out-of-boun...
kernel: smb: client: validate absolute native symlink targets before NT fixups
A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...
kernel: smb: client: validate absolute native symlink targets before NT fixups
A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...
kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
A flaw was found in the Linux kernel's Server Message Block SMB client. When a file with the setuid or setgid bit is written to on certain Common Internet File System CIFS mounts specifically those using 'cifsacl', 'modefromsid' options, or SMB3.1.1 POSIX extensions, the kernel fails to properly...
kernel: smb: client: reject a tree connect response whose byte count is too small
A flaw was found in the Linux kernel's Server Message Block SMB client. A remote malicious SMB server could send a specially crafted tree connect response with a byte count that is too small. This incorrect handling can lead to an integer underflow, causing the client to read beyond an allocated...
Blackash-CVE-2025-33073
โจ CVE-2025-33073: Windows SMB RCE Vulnerability ๐จ ๐ฅ High-Severity Authenticated Remote Code Execution ๐ฅ Improper Access Control in Windows SMB Client CWE-284 ๐ก๏ธ Key Details at a Glance Aspect| Details ---|--- CVSS v3.1 Score| 8.8 High ๐ฅ Affected Systems| Windows 10, 11, Server 2012โ2025 all...
CVE-2026-97555
CVE-2026-97555 โ cifs DACL owner/group heap overflow English | ็ฎไฝไธญๆ Kernel heap overflow in the SMB client DACL rewrite. idmodetocifsacl sizes the output security descriptor from the DACL returned by the server, but replacesidsandcopyaces rewrites every ACE with the new owner/group SID up to 68...
kernel: smb: client: reject a tree connect response whose byte count is too small
A flaw was found in the Linux kernel's Server Message Block SMB client. A remote malicious SMB server could send a specially crafted tree connect response with a byte count that is too small. This incorrect handling can lead to an integer underflow, causing the client to read beyond an allocated...
CVE-2026-119870
Untrusted pointer dereference in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-112970
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally...