Product:
Windows SMBv3 Client
Summary
Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network. This vulnerability can be exploited by an attacker with low privileges who can interact with the system. The attack requires a high level of complexity and user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.8 | CVE-2025-54101 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the network and must interact with the affected system. The attacker can leverage the use after free condition to execute arbitrary code, potentially leading to a full system compromise. Successful exploitation requires careful manipulation of the SMBv3 Client to trigger the vulnerability.
Affected Products
- Windows SMBv3 Client: Vulnerable to code execution due to use after free condition.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. It is also recommended to limit network access and monitor for any unauthorized interactions with the SMBv3 Client. Implementing strict access controls can help reduce the risk of exploitation.