CVE-2025-33073

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. An improper access control flaw in the Windows SMB Client that revives NTLM reflection techniques thought to be mitigated — letti...

windows-smb-vulnerability-framework-cve-2025-33073

Windows SMB Client Vulnerability Research Framework Author: cyberseallll Created: 2025 Overview I developed this research framework to analyze and understand CVE-2025-33073, a critical Windows SMB Client Elevation of Privilege vulnerability. This implementation provides comprehensive tools for...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Windows SMB RCE Vulnerability 🚨 🔥 High-Severity Authenticated Remote Code Execution 🔥 Improper Access Control in Windows SMB Client CWE-284 🛡️ Key Details at a Glance Aspect| Details ---|--- CVSS v3.1 Score| 8.8 High 🔥 Affected Systems| Windows 10, 11, Server 2012–2025 all...

CVE-2026-84011

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...

CVE-2026-83789

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83789

A heap-based buffer overflow exists in the Windows SMB Client component. This vulnerability allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. While an official fix...

CVE-2026-84011

The Windows SMB Client is susceptible to an incorrect authorization vulnerability (CWE-863) that allows an authorized attacker to bypass a security feature locally. The vulnerability results in a high integrity impact but no impact on confidentiality or availability. Remediation is provided via a...

Windows SMB Client Security Feature Bypass Vulnerability

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...

Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-84011: Incorrect Authorization

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...

CVE-2026-83789: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network...

PT-2026-112700

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description Incorrect authorization in the Windows SMB Client allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a...

CVE-2026-72936

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69618

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

CVE-2026-69572

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...

CVE-2026-69544

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...

EUVD-2026-73664

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-72936

CVE-2026-72936 is a use-after-free vulnerability in the Windows SMB Client that allows an unauthorized, remote attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network attack vector with high complexity, no required privileges, and n...

EUVD-2026-73551

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

CVE-2026-69618

CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...