You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2025-33073
About this tag
CVE-2025-33073 is a high-severity elevation of privilege vulnerability in the Microsoft Windows Server Message Block (SMB) client. It was patched by Microsoft during the June 2025 Patch Tuesday, but proof-of-concept exploits and active exploitation in the wild have since been reported. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added it to the Known Exploited Vulnerabilities (KEV) catalog, urging immediate action. The vulnerability enables a Reflective Kerberos Relay Attack, allowing attackers to subvert authentication mechanisms without specialized access. Windows administrators are advised to prioritize remediation to protect enterprise environments from privilege escalation threats.
Microsoft, CISA and multiple security vendors are now urging immediate action after a high‑severity Windows SMB client vulnerability—CVE-2025-33073—was added to the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog and is reported to be...
As of July 8, 2025, there is no publicly available information regarding a vulnerability identified as CVE-2025-48802 in the Windows SMB Server. It's possible that this CVE has not been disclosed or documented in public databases.
However, there have been recent vulnerabilities related to...
A critical new vulnerability has rocked the Windows security landscape, exposing enterprises worldwide to a sophisticated privilege escalation threat unlike any previously documented. The flaw—now cataloged as CVE-2025-33073—lays bare the potential for attackers to subvert fundamental...
June 2025's Patch Tuesday brought a sense of urgency back to the Windows security community, as Microsoft addressed a suite of 67 new vulnerabilities—among them, two zero-day exploits and multiple high-profile threats targeting legacy protocols and modern productivity tools. As enterprises and...
June’s Patch Tuesday has arrived, and with it comes a sprawling set of Microsoft Windows security updates that every system administrator and home user needs to evaluate. The June 2025 Patch Day, just announced by Microsoft, demonstrates the ongoing complexity of keeping the world’s most widely...
active exploits
cve-2025-33053
cve-2025-33073
cybersecurity
feature rollout
global user experience
patch
patch management
remote code execution
security
security fixes
system administration
vulnerability management
windows 10
windows 11
windows security
windows server
windows update
zero-day vulnerabilities