CVE-2025-55234

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against relay attacks: SMB Server signing SMB Server Extended Protection for Authentication (EPA) Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks. If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks: Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates. See Support for Audit Events to deploy SMB Server Hardening—SMB Server Signing & SMB Server EPA. Adopt appropriate SMB Server hardening measures.

• CWE-287

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55234Vendor Advisory
• https://www.vicarius.io/vsociety/posts/cve-2025-55234-detection-script-smb-server-vulnerability-affecting-microsoft-systems
• https://www.vicarius.io/vsociety/posts/cve-2025-55234-mitigation-script-smb-server-vulnerability-affecting-microsoft-systems

Published

Sep 9, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-55229Improper verification of cryptographic signature in Windows …5.3
• CVE-2025-5523A vulnerability classified as problematic has been found in …6.1
• CVE-2025-55230Untrusted pointer dereference in Windows MBT Transport drive…7.8
• CVE-2025-55231Concurrent execution using shared resource with improper syn…7.5
• CVE-2025-55232Deserialization of untrusted data in Microsoft High Performa…9.8
• CVE-2025-55233Out-of-bounds read in Windows Projected File System allows a…7.8
• CVE-2025-55236Time-of-check time-of-use (toctou) race condition in Graphic…7.8
• CVE-2025-55238Dynamics 365 FastTrack Implementation Assets Information Dis…7.5
• CVE-2025-5524The OceanWP theme for WordPress is vulnerable to Stored Cros…4.9
• CVE-2025-55240Improper access control in Visual Studio allows an authorize…7.3
• CVE-2025-55241Azure Entra ID Elevation of Privilege Vulnerability10
• CVE-2025-55242Exposure of sensitive information to an unauthorized actor i…7.5