CVE-2010-0270

CVE-2010-0270 is a critical vulnerability affecting the SMB client in Microsoft Windows 7 and Windows Server 2008 R2. It stems from improper validation of fields in SMB transaction responses, allowing remote SMB servers or man-in-the-middle attackers to execute arbitrary code or cause a denial of service through memory corruption and system reboot. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with no authentication required, leading to complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, a proof-of-concept exploit exists on ExploitDB, indicating its potential for exploitation, though there is no evidence of widespread active exploitation or significant community discussion.