Skip to content
OpenAdvisories
High MSRC-CVE-2025-59280 1 CVE

Windows SMB Client Tampering Vulnerability

Published Oct 14, 2025 · Updated Oct 14, 2025

Summary

Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R) and privileges required are none (PR:N). What does that mean for this vulnerability?
An unauthorized attacker must wait for a user to initiate a connection.

According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and integrity (I:N), but could lead to some loss of availability (A:L). What does that mean for this vulnerability?
Data Tampering when connecting to a SMB2 Server which doesn't support SMB Multi-protocol negotiate.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.

Security updates
10.0.17763.7919 — https://support.microsoft.com/help/5066586
10.0.20348.4294 — https://support.microsoft.com/help/5066782
10.0.19044.6456 — https://support.microsoft.com/help/5066791
10.0.22621.6060 — https://support.microsoft.com/help/5066793
10.0.26100.6899 — https://support.microsoft.com/help/5066835
10.0.25398.1913 — https://support.microsoft.com/help/5066780
10.0.10240.21161 — https://support.microsoft.com/help/5066837
10.0.14393.8519 — https://support.microsoft.com/help/5066836
6.0.6003.23571 — https://support.microsoft.com/help/5066874
6.0.6003.23571 — https://support.microsoft.com/help/5066877
6.1.7601.27974 — https://support.microsoft.com/help/5066872
6.1.7601.27974 — https://support.microsoft.com/help/5066876
6.2.9200.25722 — https://support.microsoft.com/help/5066875
6.3.9600.22824 — https://support.microsoft.com/help/5066873

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References