Product by Red Hat
Samba
34 known vulnerabilities in Samba (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
34
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2007-4559 | Python Software Foundation CPython: Path Traversal | 9.8 | |
| Critical | CVE-2025-10230 | Samba: command injection in wins server hook script | 10.0 | |
| Critical | CVE-2026-4480 | Samba: samba: remote code execution in printing subsystem via unescaped job description | 9.0 | |
| Critical | CVE-2026-4408 | Samba: remote code execution in samr | 9.8 | |
| High | CVE-2023-34966 | Samba: infinite loop in mdssvc rpc service for spotlight | 7.5 | |
| High | CVE-2026-3238 | Samba: denial of service against ad dc wins server | 7.5 | |
| Medium | CVE-2023-34967 | Samba: type confusion in mdssvc rpc service for spotlight | 5.3 | |
| Critical | CVE-2023-3961 | Samba: smbd allows client access to unix domain sockets on the file system as root | 9.1 | |
| High | CVE-2020-10704 | Red Hat Samba: Uncontrolled Recursion | 7.5 | |
| Medium | CVE-2019-14907 | Red Hat Samba: Out-of-bounds Read | 6.5 | |
| Medium | CVE-2019-19344 | Red Hat Samba: Use After Free | 6.5 | |
| High | CVE-2026-109411 | Samba: access control bypass via vfs_ceph_rgw case-insensitive open | 8.1 | |
| High | CVE-2026-58222 | Red Hat: LDAP Injection | 8.8 | |
| Medium | CVE-2023-42669 | Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc | 6.5 | |
| Medium | CVE-2023-5568 | Samba: heap buffer overflow with freshness tokens in the heimdal kdc | 5.9 | |
| Medium | CVE-2019-14870 | Red Hat Samba: Improper Authorization | 5.4 | |
| High | CVE-2023-4154 | Samba: ad dc password exposure to privileged users and rodcs | 7.5 | |
| Medium | CVE-2019-14861 | Red Hat Samba: Incorrect Default Permissions | 5.3 | |
| High | CVE-2026-1933 | Samba: missing access check on reparse point operations | 7.1 | |
| Medium | CVE-2022-2127 | Samba: out-of-bounds read in winbind auth_crap | 5.9 | |
| Medium | CVE-2026-2340 | Samba: vfs_worm does not block directory modification | 6.5 | |
| Medium | CVE-2020-10700 | Red Hat Samba: Use After Free | 5.3 | |
| Medium | CVE-2023-4091 | Samba: smb clients can truncate files with read-only permissions | 6.5 | |
| Medium | CVE-2023-42670 | Samba: ad dc busy rpc multiple listener dos | 6.5 | |
| Medium | CVE-2026-58218 | Samba: dns signing dos via tkey name cache exhaustion | 5.3 |