ZeroDay Findings
Sign inSign up

Findings

CVE-2025-33073

Microsoft Windows SMB Client Improper Access Control Vulnerability

Published Jun 10, 2025 · updated Jun 17, 2026 · Microsoft Windows

Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 10, 2025 · Catalog

    Detected

    Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.

  2. Oct 20, 2025 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Nov 10, 2025 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 17, 2026 · Catalog

    Updated

    Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Nov 10, 2025

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 21h2version unspecified
  • cpe microsoft/windows 10 22h2version unspecified
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2025-33073

    Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.

    cisa.gov
  • CVE.orgCVE-2025-33073

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-33073

    30-day exploitation probability 82.7%

    first.org
  • Exploit Database52330

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2025-33073

    Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

    nvd.nist.gov

References

CVE-2025-33073 · ZeroDay Findings