- How many CVEs does Samba have?
- Samba has 287 published CVE records since 1999, including 56 in the last two years.
- How many Samba CVEs are in CISA KEV?
- Yes — 2 of Samba's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Samba products have the most CVEs?
- The Samba products with the most published CVEs are samba, rsync, cifs-utils, ppp, Samba mdssvc RPC service.
- What are the most common weakness types in Samba CVEs?
- Samba's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-20 (Improper Input Validation), CWE-264, CWE-59 (Improper Link Resolution Before File Access ('Link Following')).
- Are there public exploits for Samba vulnerabilities?
- Yes — 59 of Samba's CVEs have a known public exploit.
- How many critical Samba vulnerabilities are there?
- Samba has 39 critical and 103 high-severity CVEs.
- What is the average severity of Samba CVEs?
- The average CVSS base score across Samba's scored CVEs is 6.8.