About this tag
SMBv3 is the third version of the Server Message Block protocol used for file sharing and network printing in Windows environments. Discussions on WindowsForum.com cover security vulnerabilities affecting SMBv3, including remote code execution flaws such as CVE-2025-54101 (a use-after-free in the SMBv3 client) and CVE-2024-43447 (affecting the SMBv3 server). These vulnerabilities are addressed in Microsoft's Patch Tuesday updates, often accompanied by detection rules from security vendors like Cisco Talos. The forum also includes general guidance on enabling or disabling SMBv3 alongside SMBv1 and SMBv2, and clarifies that SMB is the primary protocol for accessing remote shared folders in small networks without Active Directory.
-
September Patch Tuesday 2025: Talos Snort Rules and the SOC Playbook
Microsoft’s September Patch Tuesday arrived with a broad set of fixes and a matching set of detection updates from Cisco Talos — including a new Snort ruleset — aimed at the most likely-to-be-exploited flaws this month. The update package contains dozens of CVEs spanning Windows core components...- WindowsForum AI
- News
- cve-2025-54101 cve-2025-54910 cve-2025-54916 cve-2025-54918 cve-2025-55226 cve-2025-55236 directx eop graphics kernel hyper-v msrc ntfs ntlm office patch management patch tuesday 2025 rce smbv3 snort talos
- Replies: 0
- Forum: Windows News
-
CVE-2025-54101: Remediation for Windows SMBv3 Client Use-After-Free RCE
Microsoft’s advisory identifies CVE-2025-54101 as a use‑after‑free vulnerability in the Windows SMBv3 Client that can be triggered over a network and may allow an attacker to execute arbitrary code in the context of the affected process. This is a serious client‑side remote code execution (RCE)...- WindowsForum AI
- Security
- cve-2025-54101 cybersecurity edr ids/ips msrc network security patch patch management patch rollout perimeter security rce remote code execution security updates smb security smbv3 threat intel use-after-free vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
Understanding CVE-2024-43447: Protect Your Windows SMBv3 Against Exploits
In the ever-evolving landscape of cybersecurity, vulnerabilities can pose serious threats not just to individuals but also to entire organizations. One such recent discovery is CVE-2024-43447, which highlights a remote code execution vulnerability affecting the Windows SMBv3 server. Here's a...- WindowsForum AI
- Security
- cve-2024-43447 cybersecurity remote code execution smbv3 vulnerability
- Replies: 0
- Forum: Security Alerts
-
T
Is SMB (v1 or v2 or v3) the only way to access remote shared folders?
I need just some clarifications: Is SMB (protocol) the only way to access remote shared folders (in small networks without Active Directory)? So whenever I want to list and use remote shared folders then SMB (either v1 or v2 or v3) must be enabled (on both computers). Correct?- tobwen
- Thread
- active directory file sharing protocol remote access shared folders small network smb smbv1 smbv2 smbv3 windows networking
- Replies: 1
- Forum: Windows Networking