Windows 10 SMBv3 Exploit - CVE-2021-28324

To exploit this SMB memory leak vulnerability, the attacker initiates a connection with a file server by sending a specially-designed SMBv3 packet. The SMB negotiation request from the attacker contains modified parameter values that allow uninitialized kernel memory to be stored in the response. As a result, the response from the server might disclose data that the attacker can leverage for future attacks.

This type of memory leak can occur in response to a legitimate SMBv3 negotiation request. Even if the request is from a legitimate source, the memory leak indicates that your environment is vulnerable to an attack and should be patched.