CVE-2017-0147

A flaw in Windows SMB (file-sharing protocol) allows attackers to send specially crafted messages over the network and read sensitive information from a computer's memory without needing to log in. This is dangerous because attackers can access passwords, encryption keys, and other confidential data remotely.

The SMBv1 server implementation in affected Windows versions is vulnerable to an information disclosure attack where remote, unauthenticated attackers can craft malicious SMB packets to trigger memory leaks. The vulnerability exposes process memory contents to the attacker, potentially revealing credentials, cryptographic material, or other sensitive data in memory without requiring valid credentials or authentication.