CVE-2025-33073
Windows SMB Client Elevation of Privilege Vulnerability
KEVHIGH 8.8EPSS 82.7%
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
- Affected
- Microsoft · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 22H2
- CVSS v3.1 MICROSOFT
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 82.70% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2025-10-20
- Published
- 2025-06-10
- Updated
- 2026-02-26
Proof-of-concept exploits (41)
- DakshRocks21/EH_Assignment_Materials0★ · 2025-08-15
- afkfr0mkeyb0ard/CustomKaliSetup0★ · 2026-06-17
- cve-2025-33073/Avisador0★ · 2021-08-03
- cve-2025-33073/Backdoor0★ · 2025-04-07
- cve-2025-33073/CataArquivos0★ · 2025-06-20
- cve-2025-33073/ConsumindoAPIGoogleGemini0★ · 2025-04-05
- cve-2025-33073/ContaBanco0★ · 2025-05-17
- cve-2025-33073/Digitador0★ · 2021-11-15
- cve-2025-33073/DrRoboTinic0★ · 2021-05-16
- cve-2025-33073/EstoqueStore0★ · 2025-09-07
- cve-2025-33073/Ferra0★ · 2021-11-04
- cve-2025-33073/FiveMGTA5Aprovador0★ · 2023-02-09
- cve-2025-33073/Horas0★ · 2026-10-13
- cve-2025-33073/JDKSenhas0★ · 2026-03-29
- cve-2025-33073/JoJoCafeMYSQL0★ · 2020-07-06
- cve-2025-33073/ListarIPs0★ · 2023-03-06
- cve-2025-33073/MemoriaCripto0★ · 2024-11-15
- cve-2025-33073/Mexe0★ · 2022-04-30
- cve-2025-33073/NazareTedesco0★ · 2022-12-26
- cve-2025-33073/RecebimentoEspiao1★ · 2023-02-09
- cve-2025-33073/SeguidoresTwitterUsandoAPIdoTwitter0★ · 2023-04-14
- cve-2025-33073/ServicoSystemD1★ · 2023-02-19
- cve-2025-33073/Shell0★ · 2025-04-08
- cve-2025-33073/UsurpadoraDeHoras0★ · 2021-06-01
- cve-2025-33073/cmd0★ · 2021-10-31
- cve-2025-33073/cmd20★ · 2021-11-05
- cve-2025-33073/pythonPromptFile0★ · 2022-11-25
- cve-2025-33073/reselinux0★ · 2021-12-12
- cve-2025-33073/telegrampobot19760★ · 2021-11-06
- cve-2025-33073/vermut0★ · 2020-06-26
- cve-2025-33073/vermut-java0★ · 2020-06-29
- mbanyamer/-Windows-11-SMB-Client-RCE-Privilege-Escalation-Exploit-Using-DNS-Poisoning-NTL…7★ · 2025-06-13
- mverschu/CVE-2025-33073719★ · 2026-02-18
- obscura-cert/CVE-2025-330731★ · 2025-06-28
- EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073-3★ · 2026-03-31
- SFRDevelopment/windows-smb-vulnerability-framework-cve-2025-330736★ · 2025-10-18
- irjfifndn-prog/Blackash-CVE-2025-330730★ · 2025-11-15
- matejsmycka/CVE-2025-33073-checker0★ · 2025-07-31
- uziii2208/CVE-2025-3307367★ · 2025-11-14
- abraxas/veneficus-implant-public0★ · 2026-09-04
- starscow/CVE-2025-330730★ · 2025-06-15
ExploitDB entries (1)
Security advisories
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33073
- https://www.vicarius.io/vsociety/posts/cve-2025-33073-detection-script-improper-access-co…
- https://www.vicarius.io/vsociety/posts/cve-2025-33073-mitigation-script-improper-access-c…