RaqibCTI
CVE

CVE-2025-33073

P2
Microsoft Windows SMB Client Improper Access Control Vulnerability
Microsoft · Windows
Date added (CISA)
2025-10-20
Remediation due
2025-11-10
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.

Source: NVD ↗ · CISA KEV Catalog ↗