Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2025-33053

🗓️ 10 Jun 2025 17:22:18Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 11 Views

External control of file name in WebDAV allows network code execution by unauthorized attackers.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for External Control of File Name or Path in Microsoft
18 Dec 202509:00
–githubexploit
githubexploit
GithubExploit		Exploit for External Control of File Name or Path in Microsoft
18 Jun 202510:08
–githubexploit
githubexploit
GithubExploit		Exploit for External Control of File Name or Path in Microsoft
23 Aug 202501:37
–githubexploit
githubexploit
GithubExploit		Exploit for External Control of File Name or Path in Microsoft
12 Jun 202506:48
–githubexploit
githubexploit
GithubExploit		Exploit for External Control of File Name or Path in Microsoft
18 Jun 202519:39
–githubexploit
attackerkb
ATTACKERKB		CVE-2025-33053
10 Jun 202500:00
–attackerkb
avleonov
Information Security Automation		July “In the Trend of VM” (#17): vulnerabilities in Microsoft Windows and Roundcube
21 Jul 202516:30
–avleonov
avleonov
Information Security Automation		About Remote Code Execution – Internet Shortcut Files (CVE-2025-33053) vulnerability
21 Jul 202511:50
–avleonov
avleonov
Information Security Automation		June Microsoft Patch Tuesday
10 Jun 202521:49
–avleonov
bdu_fstec
BDU FSTEC		The vulnerability of the WebDAV protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.
11 Jun 202500:00
–bdu_fstec
Rows per page
NVD
Node
OR
microsoftwindows_10_1507Range<10.0.10240.21034x64
microsoftwindows_10_1507Range<10.0.10240.21034x86
microsoftwindows_10_1607Range<10.0.14393.8148x64
microsoftwindows_10_1607Range<10.0.14393.8148x86
microsoftwindows_10_1809Range<10.0.17763.7434x64
microsoftwindows_10_1809Range<10.0.17763.7434x86
microsoftwindows_10_21h2Range<10.0.19044.5965arm64
microsoftwindows_10_21h2Range<10.0.19044.5965x64
microsoftwindows_10_21h2Range<10.0.19044.5965x86
microsoftwindows_10_22h2Range<10.0.19045.5965arm64
microsoftwindows_10_22h2Range<10.0.19045.5965x64
microsoftwindows_10_22h2Range<10.0.19045.5965x86
microsoftwindows_11_22h2Range<10.0.22621.5472arm64
microsoftwindows_11_22h2Range<10.0.22621.5472x64
microsoftwindows_11_23h2Range<10.0.22631.5472arm64
microsoftwindows_11_23h2Range<10.0.22631.5472x64
microsoftwindows_11_24h2Range<10.0.26100.4270arm64
microsoftwindows_11_24h2Range<10.0.26100.4270x64
microsoftwindows_server_2008Match-sp2x64
microsoftwindows_server_2008Match-sp2x86
microsoftwindows_server_2008Matchr2sp1x64
microsoftwindows_server_2012Match-
microsoftwindows_server_2012Matchr2
microsoftwindows_server_2016Range<10.0.14393.8148
microsoftwindows_server_2019Range<10.0.17763.7434
microsoftwindows_server_2022Range<10.0.20348.3745
microsoftwindows_server_2022_23h2Range<10.0.25398.1665x64
microsoftwindows_server_2025Range<10.0.26100.4270x64
SourceLink
vicariuswww.vicarius.io/vsociety/posts/cve-2025-33053-detection-script-remote-code-execution-vulnerability-in-microsoft-webdav
msrcwww.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053
bleepingcomputerwww.bleepingcomputer.com/news/security/stealth-falcon-hackers-exploited-windows-webdav-zero-day-to-drop-malware/
theregisterwww.theregister.com/2025/06/10/microsoft_patch_tuesday_june/
cisawww.cisa.gov/known-exploited-vulnerabilities-catalog
therecordwww.therecord.media/microsoft-cisa-zero-day-turkish-defense-org
researchwww.research.checkpoint.com/2025/stealth-falcon-zero-day/
vicariuswww.vicarius.io/vsociety/posts/cve-2025-33053-mitigation-script-remote-code-execution-vulnerability-in-microsoft-webdav
darkreadingwww.darkreading.com/vulnerabilities-threats/stealth-falcon-apt-exploits-microsoft-rce-zero-day-mideast

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 09:13Current
CVSS 3.18.8
EPSS0.85289
CWE-73
cve identifierwebdavunauthorized accesscode execution
11