Microsoft Windows SMBv3 Client Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in the Windows SMBv3 client, allowing an authorized attacker to execute code remotely over the network. This vulnerability requires the targeted user to initiate a connection to a malicious server, creating a race condition that the attacker can exploit.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065425, KB5065427, KB5065428, KB5065429, and KB5065430.