windows-smb-vulnerability-framework-cve-2025-33073

Marco de Investigación de Vulnerabilidades del Cliente SMB de Windows Autor: cyberseallll Creado: 2025 Descripción General Desarrollé este marco de investigación para analizar y comprender CVE-2025-33073, una vulnerabilidad crítica de Elevación de Privilegios en el Cliente SMB de Windows. Esta...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Vulnerabilidad de RCE en Windows SMB 🚨 🔥 Ejecución remota de código autenticada de alta gravedad 🔥 Control de acceso inadecuado en el cliente SMB de Windows CWE-284 🛡️ Detalles clave de un vistazo Aspecto| Detalles ---|--- Puntuación CVSS v3.1| 8.8 Alta 🔥 Sistemas afectados|...

Rocky Linux 9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (crxsa-2023_7749)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-20237749 advisory. kernel: use-after-free vulnerability in the smb client component CVE-2023-5345 kernel: IGB driver inadequate buffer size for frames larger than MTU...

Rocky Linux 8 [CIQ] Security Update: kernel-rt-debug-debuginfo / kernel-rt-debuginfo / etc (crlsa-2026_23259)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202623259 advisory. kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions CVE-2026-46243 Tenable has extracted the preceding description block directly from the...

CVE-2026-90125

A flaw was found in the SMB client of the Linux kernel. In the smb2newreadreq function, a request buffer is allocated but not properly released when certain error conditions occur during an asynchronous read operation. A remote attacker could repeatedly trigger these error conditions, leading to ...

cifswitch-check

cifswitch-check Un script de shell para comprobar si un sistema Linux está expuesto a CIFSwitch CVE-2026-46243 — una vulnerabilidad de escalada de privilegios local en el cliente CIFS/SMB del kernel de Linux que existe desde 2007. Se ejecuta en hosts de metal desnudo, máquinas virtuales y dentro ...

CVE-2025-33073

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. An improper access control flaw in the Windows SMB Client that revives NTLM reflection techniques thought to be mitigated — letti...

CVE-2026-97565

A flaw was found in the Linux kernel's SMB Server Message Block client. When communicating with a malicious or compromised server, the client fails to verify that an incoming read response meets the expected minimum header size before accessing header fields. A malicious server can send a truncat...

CVE-2026-97564

A flaw was found in the Linux kernel's SMB Server Message Block client. This vulnerability allows a local user to achieve privilege escalation due to missing validation on identity mapping key descriptions. Because the kernel does not verify that identity mapping requests originate internally, a...

CVE-2026-97563

A flaw was found in the Linux kernel's Server Message Block SMB client. When processing SMB version 1 responses, the read handler does not properly validate the data offset value sent by the server. A malicious or compromised SMB server can exploit this flaw by returning a crafted response with a...

CVE-2026-97562

A flaw was found in the Linux kernel's SMB Server Message Block client. A race condition occurs when a Distributed File System DFS automount expires while the client processes active filesystem references, resulting in a use-after-free memory flaw. A local user could exploit this timing issue...

CVE-2026-97561

A flaw was found in the Linux kernel's Server Message Block SMB client. When an administrator mounts a remote share with options configured to force specific local user and group ownership, the client fails to enforce these restrictions and instead accepts ownership values provided by the remote...

CVE-2026-97560

A flaw was found in the Linux kernel's SMB Server Message Block client. When parsing a share-root relative native symbolic link, an incorrect length calculation causes the client to read past the end of the allocated buffer in the smb2parsenativesymlink function. A malicious server or attacker...

CVE-2026-97559

A flaw was found in the Linux kernel's SMB client. An integer overflow during Discretionary Access Control List DACL reconstruction can allow a local user to corrupt file access permissions sent to a remote server. When processing file permission or ownership updates with numerous access control...

CVE-2026-97558

A flaw was found in the Linux kernel's SMB Server Message Block client subsystem, which can lead to a Denial of Service DoS. Due to a timing issue during deferred file close operations, the kernel fails to properly release an internal file reference count when background cleanup work is already...

CVE-2026-97557

A flaw was found in the Linux kernel's Server Message Block SMB client. This flaw allows a remote or slow-responding SMB server to cause a Denial of Service DoS through a kernel crash. When handling opportunistic lock oplock break requests, the client can leak file reference counters if a new...

CVE-2026-97556

A flaw was found in the Linux kernel's SMB client. This vulnerability can lead to a denial of service DoS on systems using multi-user CIFS mount configurations. When processing an opportunistic lock oplock break, an error during tree link lookup prevents the client from releasing an acquired file...

CVE-2026-97555

A flaw was found in the Linux kernel's SMB client. When rewriting a Discretionary Access Control List DACL during file ownership updates, the kernel allocates memory based on the original identifier lengths rather than accounting for larger replacement Security Identifiers SIDs. A local user can...

CVE-2026-97554

A flaw was found in the Linux kernel's Server Message Block SMB client. When handling malformed directory entries with invalid security identifiers, the client fails to verify whether data parsing succeeded before processing file attributes. A malicious or compromised server could exploit this...

ROS-20260929-73-0040

The vulnerability of the cifsconstructtcon function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...