CVE-2025-54101

Published Sep 9, 2025

Last updated a year ago

CVSS medium 4.8
Smb

Overview

Description
Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
Source
secure@microsoft.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Primary
Base score
4.8
Impact score
3.6
Exploitability score
1.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Severity
MEDIUM

Weaknesses

secure@microsoft.com
CWE-416

Social media

Hype score
Not currently trending

  1. ☣️ CVE of the Week: Bio-cyborg! ☣️ A high-severity vulnerability, CVE-2025-54101, has been identified in the Windows SMBv3 Client. Even though Microsoft’s CVSS v3.1 vector reflects high attack complexity, which is why the base score is Medium (4.8), the flaw is a use-a

    @vicariusltd

    24 Oct 2025

    67 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2025-54101 Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network. https://t.co/6xh9IcjSy0

    @CVEnew

    9 Sept 2025

    113 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. CVE-2026-6949
  2. CVE-2026-58221
  3. Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks mandatory signing/encryption and is vulnerable to NTLM relay and content-tampering MITM. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12•CVE-2026-59293
  4. A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.•CVE-2026-58224
  5. An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.•CVE-2026-58216

References

Sources include official advisories and independent security research.