CVE-2025-33053

Internet Shortcut Files Remote Code Execution Vulnerability

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

Affected

Microsoft · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 22H2

CVSS v3.1 MICROSOFT

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

87.02% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2025-06-10

Published

2025-06-10

Updated

2026-02-26

Proof-of-concept exploits (7)

• https://www.vicarius.io/vsociety/posts/cve-2025-33053-mitigation-script-remote-code-execu…
• 4n4s4zi/CVE-2025-33053_PoC1★ · 2025-08-23
• DevBuiHieu/CVE-2025-33053-Proof-Of-Concept62★ · 2025-06-17
• TheTorjanCaptain/CVE-2025-33053-Checker-PoC1★ · 2025-06-18
• kra1t0/CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept3★ · 2025-06-19
• veath1/LNK-File-WEBDAV-Remote-Code-Execution-Vulnerability5★ · 2025-08-24
• Cyberw1ng/CVE-2025-33053-POC0★ · 2025-12-18

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/unc_url_cve_2…

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053
• https://www.vicarius.io/vsociety/posts/cve-2025-33053-detection-script-remote-code-execut…

References

• CVE Record
• NVD entry

Related

• CVE-2026-31431
• CVE-2025-6558
• CVE-2025-49144
• CVE-2026-23550