CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows SMB Improper Access Control Privilege Escalation Vulnerability (CVE-2025-33073) Analysis and Mitigation Guide
[Affected Scope] All Windows and Windows Server systems utilizing the SMBv3 protocol within Active Directory domains or workgroups
[Impact] An authenticated attacker with network access can exploit improper access control in SMB to elevate privileges to SYSTEM and execute arbitrary code
[Mitigation] Apply the latest Microsoft Cumulative Updates immediately and restrict SMB (TCP 445) inbound traffic using firewalls
Windows SMB Server Information Disclosure Vulnerability (CVE-2019-0703) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 7, 8.1, 10 and Windows Server 2008, 2012, 2016, 2019 utilizing SMBv1/v2/v3 protocols
[Impact] An authenticated remote attacker can disclose sensitive kernel memory information by sending specially crafted SMB requests, potentially bypassing ASLR to facilitate remote code execution (RCE)
[Mitigation] Apply the official Microsoft cumulative security updates and completely disable the legacy SMBv1 protocol across the infrastructure
MikroTik RouterOS SMB Service Unauthenticated Remote Code Execution (RCE) Vulnerability (CVE-2018-7445) Analysis and Mitigation Guide
[Affected Scope] All architectures and devices running MikroTik RouterOS before versions 6.41.3 or 6.42rc27
[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted NetBIOS session requests, leading to full remote code execution with administrative privileges
[Mitigation] Immediately upgrade RouterOS to the latest stable release (6.41.3+ or 6.42rc27+) and disable the SMB service if it is not business-critical
Microsoft Windows Search Service Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2017-8543)
[Affected Scope] Broad range of Microsoft Windows operating systems including Windows XP, Vista, 7, 8, 8.1, 10, and Windows Server 2003, 2008, 2012, 2016.
[Impact] An unauthenticated remote attacker can exploit this vulnerability via SMB to execute arbitrary code with SYSTEM privileges, leading to full system compromise.
[Mitigation] Immediately apply the official Microsoft security patches, or disable the Windows Search service and block SMB port (TCP 445) as a temporary workaround.
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0148) - MS17-010
[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending crafted packets, leading to complete system compromise
[Mitigation] Apply the MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network
Microsoft Windows SMBv1 Remote Information Disclosure Vulnerability (CVE-2017-0147) Security Advisory
[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled
[Impact] Unauthenticated remote attackers can extract sensitive information from kernel process memory via crafted SMBv1 packets, which can be chained with tools like DOUBLEPULSAR for further compromise
[Mitigation] Apply the MS17-010 security update immediately and completely disable the legacy SMBv1 protocol across the enterprise
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0146)
[Affected Scope] Legacy Microsoft Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled.
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted SMBv1 packets, leading to complete system compromise.
[Mitigation] Immediately apply the official Microsoft security update (MS17-010) and completely disable the legacy SMBv1 protocol across the enterprise network.
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0145, EternalBlue/DoublePulsar)
[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/kernel privileges by sending specially crafted SMBv1 packets, leading to complete system compromise
[Mitigation] Immediately apply the Microsoft MS17-010 security patch and completely disable the legacy SMBv1 protocol across the enterprise network
Microsoft Windows SMBv1 Remote Code Execution Vulnerability (CVE-2017-0143, EternalBlue)
[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system by sending crafted SMBv1 packets
[Mitigation] Apply the Microsoft MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network