Microsoft Addresses ksmbd Vulnerabilities CVE-2025-22042 and CVE-2025-22043

First seen 18 Feb 2026, 12:23 UTC • Api.Msrc.Microsoft

•39

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Microsoft has published information regarding two vulnerabilities in ksmbd: CVE-2025-22042 and CVE-2025-22043. Both vulnerabilities were published on April 16, 2025, and involve adding bounds checks for lease and durable handle contexts, respectively, affecting systems utilizing ksmbd.

How this analysis works

Timeline

2025-04-16

CVE-2025-22042 and CVE-2025-22043 published

2026-02-18

Microsoft publishes information on CVE-2025-22042 and CVE-2025-22043

Attack Flow

Continue Reading

Multiple CVEs Address NULL Pointer Dereferences in Various Drivers Multiple CVEs Address Use-After-Free Vulnerabilities in ksmbd Out-of-Bounds Vulnerabilities in ksmbd Addressed

Microsoft Addresses ksmbd Vulnerabilities CVE-2025-22042 and CVE-2025-22043

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading