Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory leak on the deferred close xfstests on smb21 report kmemleak as below: unreferenced object 0xffCheck this weekEPSS 19.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cifs: fix small mempool leak in SMB2_negotiate() In some cases of failure (dialect mismatches) in SMB2_negotiateCheck this weekEPSS 18.00%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_fill_dirent There is a race condition in the readdir concurrency processCheck this weekEPSS 20.00%Jun 18, 2025
- Medium6.5A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saviCheck if you run itEPSS 0.58%Jun 11, 2025
- High7.8Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.49%Jun 10, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- Medium4.9A flaw was found in Samba.Check this weekEPSS 75.00%Jun 6, 2025
- High7.5MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability.Check this weekEPSS 55.00%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added bounds check for create lease contexCheck if you run itEPSS 0.19%May 20, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server.Check if you run itEPSS 0.38%May 20, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lease breaks A pre-existing valid cfid returned from find_or_creCheck if you run itEPSS 0.37%May 20, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destroys the file via __ksmbCheck if you run itEPSS 0.37%May 20, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() did not validate whetherCheck if you run itEPSS 0.65%May 20, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open A UAF issue can occur due to a race condition between ksmbd_Check if you run itEPSS 0.57%May 20, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introduced to fix the danglinCheck this weekEPSS 22.05%May 20, 2025
- High8.8Linux Kernel 'sess->user' Object Use‑After‑Free VulnerabilityPatch nowKEVEPSS 0.88%May 20, 2025
- Medium5.4Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.12%May 13, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" wait_event_timeout() will set the state of theCheck if you run itEPSS 0.36%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2_open() Reference count of acls will leak when memory allocation fails.Check this weekEPSS 20.00%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() pci_get_device() will increase the refeCheck this weekEPSS 22.00%May 1, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and does not set the pointer tCheck if you run itEPSS 1.14%May 1, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_conn_free.Check if you run itEPSS 0.37%May 1, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_all_levII_oplock that canCheck if you run itEPSS 0.35%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix the warning from __kernel_write_iter [ 2110.972290] ------------[ cut here ]------------ [ 2110.97230Check if you run itEPSS 0.19%May 1, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: client: allocate crypto onCheck if you run itEPSS 0.38%May 1, 2025