Skip to content
COOEY

EXPOSURES › CVE-2025-33073

CVE-2025-33073

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2025-10-20 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-33073 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatchedrce

Microsoft Windows SMB Client improper access control allowed remote code execution

An unpatched vulnerability in Microsoft's Windows SMB Client allowed for remote code execution, enabling attackers to compromise systems through SMB connections.

Shame score — Critical access control flaw exploited in the wild without a patch.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized