Samba Samba vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20186
3. 20196
4. 20221
5. 20261

Known exploitedNewest addition to KEV first

• CVE-2017-7494

  Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a…

  Samba · samba

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-109411

  Samba: access control bypass via vfs_ceph_rgw case-insensitive open

  Samba · Samba

  High8.1
• CVE-2021-44142

  The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a…

  Samba · Samba

  High8.8
• CVE-2011-3585

  Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a…

  Samba · Samba

  Medium4.7
• CVE-2019-14847

  A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of…

  Samba · samba

  Medium4.9
• CVE-2019-14833

  A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or…

  Samba · samba

  Medium4.2
• CVE-2019-10218

  A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client…

  Samba · samba

  Medium5.3
• CVE-2019-10197

  A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the…

  SAMBA · samba

  Medium6.5
• CVE-2018-16860

  A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding…

  SAMBA · samba

  High7.5
• CVE-2017-12151

  A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection…

  Samba · samba

  High7.4
• CVE-2017-12150

  It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were…

  Samba · samba

  High7.4