Microsoft Server Message Block vulnerabilities

5 CVEs affecting Microsoft Server Message Block, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-0148, published 2017-03-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-0148: Microsoft SMBv1 Server Remote Code Execution Vulnerability, published 2017-03-17. High severity, CVSS 8.1. Actively exploited: in CISA KEV since 2022-04-06. EPSS: 99.4% chance of exploitation in the next 30 days. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;…
CVE-2017-0144: Microsoft SMBv1 Remote Code Execution Vulnerability, published 2017-03-17. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-02-10. EPSS: 99.2% chance of exploitation in the next 30 days. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;…
CVE-2017-0143: Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability, published 2017-03-17. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 93.3% chance of exploitation in the next 30 days. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;…
CVE-2017-0146: Microsoft Windows SMB Remote Code Execution Vulnerability, published 2017-03-17. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 89.9% chance of exploitation in the next 30 days. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;…
CVE-2017-0145: Microsoft SMBv1 Remote Code Execution Vulnerability, published 2017-03-17. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-02-10. EPSS: 89.9% chance of exploitation in the next 30 days. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;…