Do Son The Samba Team dropped fixes for critical Samba vulnerabilities. Read about the remote code execution flaws carrying perfect 10.0 CVSS scores.
samba
Samba released an urgent fix for a Critical (CVSS 10.0) RCE flaw (CVE-2025-10230) allowing unauthenticated command injection on AD DCs when the WINS hook is enabled. Update to 4.23.2.
Samba vulnerability (CVE-2025-0620) exposes stale group data in Kerberos SMB sessions. Learn how this impacts security and mitigation.
DarkGate has reemerged, leveraging a clever combination of Microsoft Excel files and public Samba shares to distribute its malicious payload
The most serious flaw, CVE-2023-34966 (CVSS score of 7.5), is an infinite loop vulnerability in Samba's mdssvc RPC service for Spotlight
CVE-2023-0614 highlights a vulnerability that allows attackers to access and potentially obtain confidential information
Samba developers informed users this week that all versions of Samba prior to 4.16.4 was affected by CVE-2022-32744 vulnerability