{
  "cveId": "CVE-2025-55234",
  "url": "https://patchblox.com/security/cve/CVE-2025-55234",
  "summary": "CVE-2025-55234 is fixed in 37 products on 1 platform, first by KB5065427, released September 9, 2025. It is not reported as exploited, but the vendor rates exploitation more likely. Patch Radar priority: Urgent.",
  "title": "Windows SMB Elevation of Privilege Vulnerability",
  "description": "\u003Cp\u003ESMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks.\u003C/p\u003E\n\u003Cp\u003EThe SMB Server already supports mechanisms for hardening against relay attacks:\u003C/p\u003E\n\u003Cul\u003E\n\u003Cli\u003ESMB Server signing\u003C/li\u003E\n\u003Cli\u003ESMB Server Extended Protection for Authentication (EPA)\u003C/li\u003E\n\u003C/ul\u003E\n\u003Cp\u003EMicrosoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks.\u003C/p\u003E\n\u003Cp\u003EIf you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks:\u003C/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EAssess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates.  See \u003Ca href=\u0022https://support.microsoft.com/help/5066913\u0022\u003ESupport for Audit Events to deploy SMB Server Hardening\u2014SMB Server Signing \u0026 SMB Server EPA\u003C/a\u003E.\u003C/li\u003E\n\u003Cli\u003EAdopt appropriate SMB Server hardening measures.\u003C/li\u003E\n\u003C/ul\u003E",
  "published": "2025-09-09T12:00:00Z",
  "severity": "Important",
  "cvss": 8.8,
  "cwe": "Improper Authentication",
  "epss": 0.20758,
  "epssPercentile": 0.97553,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": true,
  "exploitabilityAssessment": "Exploitation More Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55234",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for 32-bit Systems",
      "fixedVersion": "14393.8422",
      "fix": "KB5065427",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065427",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for x64-based Systems",
      "fixedVersion": "14393.8422",
      "fix": "KB5065427",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065427",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1809 for 32-bit Systems",
      "fixedVersion": "17763.7792",
      "fix": "KB5065428",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065428",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1809 for x64-based Systems",
      "fixedVersion": "17763.7792",
      "fix": "KB5065428",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065428",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 21H2 for 32-bit Systems",
      "fixedVersion": "",
      "fix": "KB5065429",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065429",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 21H2 for ARM64-based Systems",
      "fixedVersion": "",
      "fix": "KB5065429",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065429",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 21H2 for x64-based Systems",
      "fixedVersion": "",
      "fix": "KB5065429",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065429",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 22H2 for 32-bit Systems",
      "fixedVersion": "",
      "fix": "KB5065429",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065429",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 22H2 for ARM64-based Systems",
      "fixedVersion": "",
      "fix": "KB5065429",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065429",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 22H2 for x64-based Systems",
      "fixedVersion": "",
      "fix": "KB5065429",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065429",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 for 32-bit Systems",
      "fixedVersion": "10240.21128",
      "fix": "KB5065430",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065430",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 for x64-based Systems",
      "fixedVersion": "10240.21128",
      "fix": "KB5065430",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065430",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 11 Version 22H2 for ARM64-based Systems",
      "fixedVersion": "",
      "fix": "KB5065431",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065431",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 11 Version 22H2 for x64-based Systems",
      "fixedVersion": "",
      "fix": "KB5065431",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065431",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 11 Version 23H2 for ARM64-based Systems",
      "fixedVersion": "",
      "fix": "KB5065431",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065431",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 11 Version 23H2 for x64-based Systems",
      "fixedVersion": "",
      "fix": "KB5065431",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065431",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 11 Version 24H2 for ARM64-based Systems",
      "fixedVersion": "26100.6584",
      "fix": "KB5065426",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065426",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 11 Version 24H2 for ARM64-based Systems",
      "fixedVersion": "26100.6508",
      "fix": "KB5065474",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065474",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 11 Version 24H2 for x64-based Systems",
      "fixedVersion": "26100.6584",
      "fix": "KB5065426",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065426",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 11 Version 24H2 for x64-based Systems",
      "fixedVersion": "26100.6508",
      "fix": "KB5065474",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065474",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB5065510",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065510",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB5065468",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065468",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB5065510",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065510",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB5065468",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065468",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB5065508",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065508",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB5065511",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065511",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB5065508",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065508",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB5065511",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065511",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB5065508",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065508",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB5065511",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065511",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB5065508",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065508",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB5065511",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065511",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB5065509",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065509",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB5065509",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065509",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2",
      "fixedVersion": "",
      "fix": "KB5065507",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065507",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB5065507",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065507",
      "released": "2025-09-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016",
      "fixedVersion": "14393.8422",
      "fix": "KB5065427",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065427",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016 (Server Core installation)",
      "fixedVersion": "14393.8422",
      "fix": "KB5065427",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065427",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2019",
      "fixedVersion": "17763.7792",
      "fix": "KB5065428",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065428",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2019 (Server Core installation)",
      "fixedVersion": "17763.7792",
      "fix": "KB5065428",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065428",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2022",
      "fixedVersion": "20348.4171",
      "fix": "KB5065432",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065432",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2022",
      "fixedVersion": "20348.4106",
      "fix": "KB5065306",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065306",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2022 (Server Core installation)",
      "fixedVersion": "20348.4171",
      "fix": "KB5065432",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065432",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2022 (Server Core installation)",
      "fixedVersion": "20348.4106",
      "fix": "KB5065306",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065306",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
      "fixedVersion": "25398.1849",
      "fix": "KB5065425",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065425",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2025",
      "fixedVersion": "26100.6584",
      "fix": "KB5065426",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065426",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2025",
      "fixedVersion": "26100.6508",
      "fix": "KB5065474",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065474",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2025 (Server Core installation)",
      "fixedVersion": "26100.6584",
      "fix": "KB5065426",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065426",
      "released": "2025-09-09T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2025 (Server Core installation)",
      "fixedVersion": "26100.6508",
      "fix": "KB5065474",
      "url": "https://patchblox.com/security/fix/microsoft/kb5065474",
      "released": "2025-09-09T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}