CVE-2025-55234

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks.
The SMB Server already supports mechanisms for hardening against relay attacks:

SMB Server signing
SMB Server Extended Protection for Authentication (EPA)

Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks.
If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks:

Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates.  See Support for Audit Events to deploy SMB Server HardeningSMB Server Signing & SMB Server EPA.
Adopt appropriate SMB Server hardening measures.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
microsoftCNA
8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA-ADPADP
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
microsoftwindows_10_1507
𝑥
< 10.0.10240.21128
microsoftwindows_10_1507
𝑥
< 10.0.10240.21128
microsoftwindows_10_1607
𝑥
< 10.0.14393.8422
microsoftwindows_10_1607
𝑥
< 10.0.14393.8422
microsoftwindows_10_1809
𝑥
< 10.0.17763.7792
microsoftwindows_10_1809
𝑥
< 10.0.17763.7792
microsoftwindows_10_21h2
𝑥
< 10.0.19044.6332
microsoftwindows_10_22h2
𝑥
< 10.0.19045.6332
microsoftwindows_11_22h2
𝑥
< 10.0.22621.5909
microsoftwindows_11_23h2
𝑥
< 10.0.22631.5909
microsoftwindows_11_24h2
𝑥
< 10.0.26100.6508
microsoftwindows_server_2008
-
microsoftwindows_server_2008
-
microsoftwindows_server_2012
-
microsoftwindows_server_2016
𝑥
< 10.0.14393.8422
microsoftwindows_server_2019
𝑥
< 10.0.17763.7792
microsoftwindows_server_2022
𝑥
< 10.0.20348.4106
microsoftwindows_server_2022_23h2
𝑥
< 10.0.25398.1849
microsoftwindows_server_2025
𝑥
< 10.0.26100.6508
𝑥
= Vulnerable software versions