SA
Product
samba
On CISA KEVExploited in the wildRansomware-linked
216
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 41Medium 76Low 1
Watch
Add samba to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7494 RansomwareIn wildKEV | 9.8 | May 30 | Samba Remote Code Execution Vulnerability Affected: since 3.5.0 |
| CVE-2026-4408 | 9.8 | May 28 | Samba: remote code execution in samr Affected: 4.1.0 before 4.21.0 |
| CVE-2023-3961 | 9.8 | Nov 3 | A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory Affected: before 4.17.12; 4.18.0 before 4.18.8; 4.19.0 before 4.19.1 |
| CVE-2022-45141 | 9.8 | Mar 6 | Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable… Affected: before 4.15.13; 4.16.0 before 4.16.8 |
| CVE-2022-44640 | 9.8 | Dec 25 | Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC) Affected: 4.15.0 before 4.15.3; 4.16.0 before 4.16.8; 4.17.0 before 4.17.4 |
| CVE-2017-14746 | 9.8 | Nov 27 | Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request Affected: 4.0.0 before 4.5.0; 4.5.0 before 4.5.15; 4.6.0 before 4.6.11; 4.7.0 before 4.7.3 |
| CVE-2019-10197 | 9.1 | Sep 3 | A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file Affected: 4.9.0 through 4.9.13; 4.10.0 through 4.10.8; 4.9.0; 4.9.0; 4.9.0; 4.9.0; +9 more |
| CVE-2026-4480 | 9.0 | May 26 | Samba: samba: remote code execution in printing subsystem via unescaped job description Affected: 4.1.0 before 4.2.1 |
Showing 8