Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2025-33073

🗓️ 10 Jun 2025 17:23:02Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 12 Views

Improper access control in Windows SMB allows attackers to elevate privileges over a network.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Improper Access Control in Microsoft
13 Jun 202512:15
–githubexploit
GithubExploit		Exploit for Improper Access Control in Microsoft
10 Dec 202503:46
–githubexploit
Information Security Automation		July “In the Trend of VM” (#17): vulnerabilities in Microsoft Windows and Roundcube
21 Jul 202516:30
–avleonov
Information Security Automation		About Elevation of Privilege – Windows SMB Client (CVE-2025-33073) vulnerability
13 Jul 202512:26
–avleonov
Information Security Automation		June Microsoft Patch Tuesday
10 Jun 202521:49
–avleonov
BDU FSTEC		The vulnerability of the mrxsmb.sys driver on Microsoft Windows SMB Client operating systems allows a hacker to elevate their privileges and execute arbitrary commands.
12 Jun 202500:00
–bdu_fstec
Circl		CVE-2025-33073
10 Jun 202513:15
–circl
CISA KEV Catalog		Microsoft Windows SMB Client Improper Access Control Vulnerability
20 Oct 202500:00
–cisa_kev
CISA		 CISA Adds Five Known Exploited Vulnerabilities to Catalog
20 Oct 202512:00
–cisa
CNNVD		Microsoft Windows SMB Server 访问控制错误漏洞
10 Jun 202500:00
–cnnvd
Rows per page
NVD
Node
microsoftwindows_10_1507Range<10.0.10240.21034x64
OR
microsoftwindows_10_1507Range<10.0.10240.21034x86
OR
microsoftwindows_10_1607Range<10.0.14393.8148x64
OR
microsoftwindows_10_1607Range<10.0.14393.8148x86
OR
microsoftwindows_10_1809Range<10.0.17763.7434x64
OR
microsoftwindows_10_1809Range<10.0.17763.7434x86
OR
microsoftwindows_10_21h2Range<10.0.19044.5965
OR
microsoftwindows_10_22h2Range<10.0.19045.5965
OR
microsoftwindows_11_22h2Range<10.0.22621.5472
OR
microsoftwindows_11_23h2Range<10.0.22631.5472
OR
microsoftwindows_11_24h2Range<10.0.26100.4270
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Range<10.0.14393.8148
OR
microsoftwindows_server_2019Range<10.0.17763.7434
OR
microsoftwindows_server_2022Range<10.0.20348.3745
OR
microsoftwindows_server_2022_23h2Range<10.0.25398.1665
OR
microsoftwindows_server_2025Range<10.0.26100.4270

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
27 Oct 2025 17:12Current
CVSS 3.18.8
EPSS0.44333
CWE-284
cve identifierwindows smbimproper access controlprivilege escalationnetwork security
12