Windows SMB vulnerabilities

6 known vulnerabilities in Windows SMB from Microsoft. 6 are rated high or critical, and 6 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Microsoft SMBv1 Server Remote Code Execution Exploited

  CVE-2017-0148Mar 17, 2017MicrosoftEPSS 99.4%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

• 7.5 High severity

  Microsoft Windows SMBv1 Information Disclosure Exploited

  CVE-2017-0147Mar 17, 2017MicrosoftEPSS 99.7%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sen

• 8.8 High severity

  Microsoft Windows SMB Remote Code Execution Exploited

  CVE-2017-0146Mar 17, 2017MicrosoftEPSS 89.9%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

• 8.8 High severity

  Microsoft SMBv1 Remote Code Execution Exploited

  CVE-2017-0145Mar 17, 2017MicrosoftEPSS 89.8%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

• 8.8 High severity

  Microsoft SMBv1 Remote Code Execution Exploited

  CVE-2017-0144Mar 17, 2017MicrosoftEPSS 99.2%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar

• 8.8 High severity

  Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Exploited

  CVE-2017-0143Mar 17, 2017MicrosoftEPSS 93.3%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute ar