Exploit for Improper Access Control in Microsoft

🗓️ 13 Jul 2026 11:47:39Reported by sentinel-aidefenseType

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP CVE Impact CWE CISA KEV Status Research writeup by Sentinel AI Defense . Defensive analysis only — no working exploitor PoC is published here. An improper access control flaw in the Windows S...

Reporter	Title	Published	Views	Family All 77
GithubExploit	Exploit for Improper Access Control in Microsoft	13 Jun 202512:15	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Microsoft	10 Dec 202503:46	–	githubexploit
Information Security Automation	July “In the Trend of VM” (#17): vulnerabilities in Microsoft Windows and Roundcube	21 Jul 202516:30	–	avleonov
Information Security Automation	About Elevation of Privilege – Windows SMB Client (CVE-2025-33073) vulnerability	13 Jul 202512:26	–	avleonov
Information Security Automation	June Microsoft Patch Tuesday	10 Jun 202521:49	–	avleonov
BDU FSTEC	The vulnerability of the mrxsmb.sys driver on Microsoft Windows SMB Client operating systems allows a hacker to elevate their privileges and execute arbitrary commands.	12 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-33073	10 Jun 202513:15	–	circl
CISA KEV Catalog	Microsoft Windows SMB Client Improper Access Control Vulnerability	20 Oct 202500:00	–	cisa_kev
CISA	CISA Adds Five Known Exploited Vulnerabilities to Catalog	20 Oct 202512:00	–	cisa
CNNVD	Microsoft Windows SMB Server 访问控制错误漏洞	10 Jun 202500:00	–	cnnvd

13 Jul 2026 11:48Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.8

EPSS0.64987

SSVC