Skip to content
OpenAdvisories
High MSRC-CVE-2025-55234 1 CVE

Windows SMB Elevation of Privilege Vulnerability

Published Sep 9, 2025 · Updated Sep 9, 2025

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

Details

Are there any further actions I need to take to be protected from relay attacks?
The security updates released on September 9, 2025 enable support for auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already supported by SMB Server. Please see https://support.microsoft.com/help/5066913 for more information.

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain the privileges of the compromised user.

Security updates
10.0.17763.7792 — https://support.microsoft.com/help/5065428
10.0.20348.4171 — https://support.microsoft.com/help/5065432
10.0.20348.4106 — https://support.microsoft.com/help/5065306
10.0.19044.6332 — https://support.microsoft.com/help/5065429
10.0.22621.5909 — https://support.microsoft.com/help/5065431
10.0.26100.6584 — https://support.microsoft.com/help/5065426
10.0.26100.6508 — https://support.microsoft.com/help/5065474
10.0.25398.1849 — https://support.microsoft.com/help/5065425
10.0.10240.21128 — https://support.microsoft.com/help/5065430
10.0.14393.8422 — https://support.microsoft.com/help/5065427
6.0.6003.23529 — https://support.microsoft.com/help/5065508
6.0.6003.23529 — https://support.microsoft.com/help/5065511
6.1.7601.27929 — https://support.microsoft.com/help/5065468
6.1.7601.27929 — https://support.microsoft.com/help/5065510
6.2.9200.25675 — https://support.microsoft.com/help/5065509
6.3.9600.22774 — https://support.microsoft.com/help/5065507

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References