AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-9640

MEDIUM · CVSS 4.3 EPSS 0.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-10-15 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. Exploitation may require the attacker to be authenticated.

CVE
CVE-2025-9640
Severity
MEDIUM
CVSS
4.3
EPSS
0.43%

Original NVD Description

A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.