Login Request a demo
SA
Vendor
Samba
7 products with CVEs on record
266
CVEs
2
On KEV
0
New 30D
Products
SA
samba
Samba
9.8
216 CVEs2 on KEV0 new
RS
rsync
Samba
9.8
41 CVEs0 on KEV0 new
CI
Cifs-utils
Samba
7.8
4 CVEs0 on KEV0 new
PP
Ppp
Samba
7.5
2 CVEs0 on KEV0 new
JI
Jitterbug
Samba
–
1 CVEs0 on KEV0 new
SS
Samba Server
Samba
–
1 CVEs0 on KEV0 new
VS
Volume Service
Samba
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-58224
SA
Samba
Samba
6.5
0%
Aug 14Samba: ctdb fails to do integrity checking of received packets
CVE-2026-70455
RS
Rsync
Samba
7.5
1%
Aug 13rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
CVE-2026-70457
RS
Rsync
Samba
8.2
0%
Aug 13rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
CVE-2026-70459
RS
Rsync
Samba
5.3
1%
Aug 13rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
CVE-2026-70461
RS
Rsync
Samba
8.2
1%
Aug 13rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
CVE-2026-70463
RS
Rsync
Samba
8.1
0%
Aug 13rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
CVE-2026-53801
RS
Rsync
Samba
5.9
0%
Aug 13rsync < 3.5.0 Symlink Race Condition Directory Traversal
CVE-2026-53800
RS
Rsync
Samba
4.7
0%
Aug 13rsync < 3.5.0 Symlink Race Condition via --remove-source-files
CVE-2026-53799
RS
Rsync
Samba
6.3
0%
Aug 13rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application
CVE-2026-53797
RS
Rsync
Samba
4.7
0%
Aug 13rsync < 3.5.0 Symlink Race Condition Information Disclosure
CVE-2026-53795
RS
Rsync
Samba
8.1
0%
Aug 13rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest
CVE-2026-53791
RS
Rsync
Samba
9.1
1%
Aug 13rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
CVE-2026-53789
RS
Rsync
Samba
8.1
0%
Aug 13rsync < 3.5.0 Arbitrary File Deletion via Malicious File List
CVE-2026-53798
RS
Rsync
Samba
5.3
0%
Aug 13rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping
CVE-2026-53786
RS
Rsync
Samba
6.5
0%
Aug 13rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive
CVE-2026-53784
RS
Rsync
Samba
7.1
0%
Aug 13rsync < 3.5.0 Path Traversal via Symlink Module Root
CVE-2026-53803
RS
Rsync
Samba
7.8
0%
Aug 13rsync < 3.5.0 Symlink Following Arbitrary File Overwrite
CVE-2026-53802
RS
Rsync
Samba
7.1
0%
Aug 13rsync < 3.5.0 Arbitrary File Read via Symlink Following
CVE-2026-4408
SA
Samba
Samba
9.8
3%
May 28Samba: remote code execution in samr
CVE-2026-1933
SA
Samba
Samba
6.5
1%
May 27Samba: missing access check on reparse point operations
CVE-2026-2340
SA
Samba
Samba
6.5
1%
May 27Samba: vfs_worm does not block directory modification
CVE-2026-3012
SA
Samba
Samba
6.8
0%
May 27Samba: group policy certificate enrollment uses http:// without validation
CVE-2026-4480
SA
Samba
Samba
9.0
14%
May 26Samba: samba: remote code execution in printing subsystem via unescaped job description
CVE-2026-29518
RS
Rsync
Samba
7.0
0%
May 20Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write
CVE-2026-43617
RS
Rsync
Samba
4.8
0%
May 20Rsync < 3.4.3 Authorization Bypass via Hostname Resolution
CVE-2026-43618
RS
Rsync
Samba
8.1
1%
May 20Rsync < 3.4.3 Integer Overflow Information Disclosure
CVE-2026-43619
RS
Rsync
Samba
6.3
0%
May 20Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls
CVE-2026-43620
RS
Rsync
Samba
5.5
0%
May 20Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()
CVE-2026-45232
RS
Rsync
Samba
3.7
0%
May 20Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy
CVE-2026-41035
RS
rsync
Samba
7.8
0%
Apr 16In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free
CVE-2025-0620
SA
Samba
Samba
4.9
1%
Jun 6A flaw was found in Samba
CVE-2024-12084
RS
Rsync
Samba
9.8
73%
Jan 15Rsync: heap buffer overflow in rsync due to improper checksum length handling
CVE-2024-12086
RS
Rsync
Samba
6.8
2%
Jan 14A flaw was found in rsync
CVE-2024-12087
RS
Rsync
Samba
7.5
2%
Jan 14Rsync: path traversal vulnerability in rsync
CVE-2024-12088
RS
Rsync
Samba
7.5
5%
Jan 14Rsync: --safe-links option bypass leads to path traversal
CVE-2024-12085
RS
Rsync
Samba
7.5
9%
Jan 14Rsync: info leak via uninitialized stack contents
CVE-2023-4154
SA
Samba
Samba
6.5
1%
Nov 7A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers…
CVE-2023-42669
SA
Samba
Samba
6.5
2%
Nov 6A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements
CVE-2023-3961
SA
Samba
Samba
9.8
3%
Nov 3A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory
CVE-2023-4091
SA
Samba
Samba
6.5
1%
Nov 3A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured…
CVE-2023-42670
SA
Samba
Samba
6.5
1%
Nov 3A flaw was found in Samba
CVE-2023-5568
SA
Samba
Samba
6.5
2%
Oct 25A heap-based Buffer Overflow flaw was discovered in Samba
CVE-2023-3347
SA
Samba
Samba
5.9
0%
Jul 20A vulnerability was found in Samba's SMB2 packet signing mechanism
CVE-2023-34968
SA
Samba
Samba
5.3
1%
Jul 20A path disclosure vulnerability was found in Samba
CVE-2023-34967
SA
Samba
Samba
5.3
61%
Jul 20A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight
CVE-2023-34966
SA
Samba
Samba
7.5
62%
Jul 20An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight
CVE-2022-2127
SA
Samba
Samba
5.9
2%
Jul 20An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c
CVE-2023-0922
SA
Samba
Samba
5.9
0%
Apr 3The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection
CVE-2023-0614
SA
Samba
Samba
6.5
1%
Apr 3The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential…
CVE-2023-0225
SA
Samba
Samba
4.3
1%
Apr 3A flaw was found in Samba
CVE-2022-45141
SA
Samba
Samba
9.8
0%
Mar 6Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable…
CVE-2021-20251
SA
Samba
Samba
5.9
1%
Mar 6A flaw was found in samba
CVE-2018-14628
SA
Samba
Samba
4.3
1%
Jan 17An information leak vulnerability was discovered in Samba's LDAP server
CVE-2022-3592
SA
Samba
Samba
6.5
3%
Jan 12A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path
CVE-2022-3437
SA
Samba
Samba
6.5
4%
Jan 12A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal
CVE-2022-44640
SA
Samba
Samba
9.8
2%
Dec 25Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC)
CVE-2022-42898
SA
Samba
Samba
8.8
7%
Dec 25PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos…
CVE-2022-4603
PP
Ppp
Samba
6.5
1%
Dec 18A vulnerability classified as problematic has been found in ppp
CVE-2022-38023
SA
Samba
Samba
8.1
2%
Nov 9Netlogon RPC Elevation of Privilege Vulnerability
CVE-2022-37967
SA
Samba
Samba
7.2
4%
Nov 9Windows Kerberos Elevation of Privilege Vulnerability