samba vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20186
3. 20196
4. 20201
5. 20221
6. 20251
7. 20262

Known exploitedNewest addition to KEV first

• CVE-2017-7494

  Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a…

  Samba · samba

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-109411

  Samba: access control bypass via vfs_ceph_rgw case-insensitive open

  Samba · Samba

  High8.1
• CVE-2026-41035

  In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run…

  Samba · rsync

  High7.4
• CVE-2024-58250

  The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.

  Samba · ppp

  Critical9.3
• CVE-2021-44142

  The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a…

  Samba · Samba

  High8.8
• CVE-2020-14342

  It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker…

  samba · cifs-utils

  Medium4.4
• CVE-2011-3585

  Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a…

  Samba · Samba

  Medium4.7
• CVE-2019-14847

  A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of…

  Samba · samba

  Medium4.9
• CVE-2019-14833

  A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or…

  Samba · samba

  Medium4.2
• CVE-2019-10218

  A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client…

  Samba · samba

  Medium5.3
• CVE-2019-10197

  A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the…

  SAMBA · samba

  Medium6.5