CVE-2025-37750: smb: client: fix UAF in decryption with multichannel

Overview

Severity
High (CVSS 7.8)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploit Status
Not Exploited
Patch Tuesday
2025-May
Released
2025-11-08
Last Updated
2026-05-22
EPSS Score
0.07% (percentile: 20.1%)

Affected Products (12)

Other

  • 20725-17084
  • 20823-17084
  • 20860-17084
  • 20956-17084
  • 21094-17084
  • 17087-17086
  • 20613-17084
  • 20788-17084
  • 21248-17084
  • 21308-17084
  • 21332-17084
  • 21344-17084

Revision History

  • 2025-11-08: Information published.
  • 2025-12-07: Information published.
  • 2026-01-08: Information published.
  • 2026-01-20: Information published.
  • 2026-02-18: Information published.
  • 2026-03-04: Information published.
  • 2026-03-31: Information published.
  • 2026-04-29: Information published.
  • 2026-05-06: Information published.
  • 2026-05-11: Information published.
  • 2026-05-17: Information published.
  • 2026-05-22: Information published.