Windows SMB vulnerabilities | LiveThreat CVE Feed

Product

Windows SMB

by Microsoft Corporation · last CVE Mar 17, 2017

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 6Medium 0Low 0

Severity

All severities6 Critical0 High6 Medium0 Low0

Exploitation

On CISA KEV6 Exploited in the wild6

Watch

Add Windows SMB to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-0146 RansomwareIn wildKEV	8.8	90%	Mar 17	Microsoft Windows SMB Remote Code Execution Vulnerability Affected: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607
CVE-2017-0145 RansomwareIn wildKEV	8.8	90%	Mar 17	Microsoft SMBv1 Remote Code Execution Vulnerability Affected: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607
CVE-2017-0144 RansomwareIn wildKEV	8.8	99%	Mar 17	Microsoft SMBv1 Remote Code Execution Vulnerability Affected: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607
CVE-2017-0143 RansomwareIn wildKEV	8.8	93%	Mar 17	Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Affected: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607
CVE-2017-0148 RansomwareIn wildKEV	8.1	99%	Mar 17	Microsoft SMBv1 Server Remote Code Execution Vulnerability Affected: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607
CVE-2017-0147 RansomwareIn wildKEV	7.5	100%	Mar 17	Microsoft Windows SMBv1 Information Disclosure Vulnerability Affected: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016