CVE-2025-54101

MEDIUM

Windows SMBv3 Client - Use-After-Free Remote Code Execution

Title source: llm

Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.

Core 3

Core References

Vendor Advisory vendor-advisory patch

Third Party Advisory

Third Party Advisory

CVSS v3 4.8

EPSS 0.0022

EPSS Percentile 44.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-416

Status published

Products (13)

microsoft/windows_10_1507 < 10.0.10240.21128 (2 CPE variants)

microsoft/windows_10_1607 < 10.0.14393.8422 (2 CPE variants)

microsoft/windows_10_1809 < 10.0.17763.7792 (2 CPE variants)

microsoft/windows_10_21h2 < 10.0.19044.6332

microsoft/windows_10_22h2 < 10.0.19045.6332

microsoft/windows_11_22h2 < 10.0.22621.5909

microsoft/windows_11_23h2 < 10.0.22631.5909

microsoft/windows_server_2012

microsoft/windows_server_2012 r2

microsoft/windows_server_2016 < 10.0.14393.8422

... and 3 more

Published Sep 09, 2025

Tracked Since Feb 18, 2026