CVE-2025-33073

📊 8.8 HIGH⚡ 35.3%🎯 37 exploits🏛️ KEV Listed

📅 Published Jun 10, 2025

📋 Status: Analyzed

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

🎯 Affected Products & Systems

21 product configurations affected

Filter by type:

Type	Vendor	Product	Version Range	Status	CPE String
💻OS	microsoft	windows 10 1507	< 10.0.10240.21034 Target HW: x64	Vulnerable	cpe:2.3:o:microsoft:windows_10_1507:::::::x64:*
💻OS	microsoft	windows 10 1507	< 10.0.10240.21034 Target HW: x86	Vulnerable	cpe:2.3:o:microsoft:windows_10_1507:::::::x86:*
💻OS	microsoft	windows 10 1607	< 10.0.14393.8148 Target HW: x64	Vulnerable	cpe:2.3:o:microsoft:windows_10_1607:::::::x64:*
💻OS	microsoft	windows 10 1607	< 10.0.14393.8148 Target HW: x86	Vulnerable	cpe:2.3:o:microsoft:windows_10_1607:::::::x86:*
💻OS	microsoft	windows 10 1809	< 10.0.17763.7434 Target HW: x64	Vulnerable	cpe:2.3:o:microsoft:windows_10_1809:::::::x64:*
💻OS	microsoft	windows 10 1809	< 10.0.17763.7434 Target HW: x86	Vulnerable	cpe:2.3:o:microsoft:windows_10_1809:::::::x86:*
💻OS	microsoft	windows 10 21h2	< 10.0.19044.5965	Vulnerable	cpe:2.3:o:microsoft:windows_10_21h2::::::::
💻OS	microsoft	windows 10 22h2	< 10.0.19045.5965	Vulnerable	cpe:2.3:o:microsoft:windows_10_22h2::::::::
💻OS	microsoft	windows 11 22h2	< 10.0.22621.5472	Vulnerable	cpe:2.3:o:microsoft:windows_11_22h2::::::::
💻OS	microsoft	windows 11 23h2	< 10.0.22631.5472	Vulnerable	cpe:2.3:o:microsoft:windows_11_23h2::::::::
💻OS	microsoft	windows 11 24h2	< 10.0.26100.4270	Vulnerable	cpe:2.3:o:microsoft:windows_11_24h2::::::::
💻OS	microsoft	windows server 2008	All versions Target HW: x64	Vulnerable	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x64:*
💻OS	microsoft	windows server 2008	All versions Target HW: x86	Vulnerable	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x86:*
💻OS	microsoft	windows server 2008	r2 Target HW: x64	Vulnerable	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
💻OS	microsoft	windows server 2012	All versions	Vulnerable	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
💻OS	microsoft	windows server 2012	r2	Vulnerable	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
💻OS	microsoft	windows server 2016	< 10.0.14393.8148	Vulnerable	cpe:2.3:o:microsoft:windows_server_2016::::::::
💻OS	microsoft	windows server 2019	< 10.0.17763.7434	Vulnerable	cpe:2.3:o:microsoft:windows_server_2019::::::::
💻OS	microsoft	windows server 2022	< 10.0.20348.3745	Vulnerable	cpe:2.3:o:microsoft:windows_server_2022::::::::
💻OS	microsoft	windows server 2022 23h2	< 10.0.25398.1665	Vulnerable	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::
💻OS	microsoft	windows server 2025	< 10.0.26100.4270	Vulnerable	cpe:2.3:o:microsoft:windows_server_2025::::::::

💻

microsoft / windows 10 1507

Operating System

Vulnerable

Version: < 10.0.10240.21034

Target HW: x64

CPE:

cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*

💻

microsoft / windows 10 1507

Operating System

Vulnerable

Version: < 10.0.10240.21034

Target HW: x86

CPE:

cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*

💻

microsoft / windows 10 1607

Operating System

Vulnerable

Version: < 10.0.14393.8148

Target HW: x64

CPE:

cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*

💻

microsoft / windows 10 1607

Operating System

Vulnerable

Version: < 10.0.14393.8148

Target HW: x86

CPE:

cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*

💻

microsoft / windows 10 1809

Operating System

Vulnerable

Version: < 10.0.17763.7434

Target HW: x64

CPE:

cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*

💻

microsoft / windows 10 1809

Operating System

Vulnerable

Version: < 10.0.17763.7434

Target HW: x86

CPE:

cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*

💻

microsoft / windows 10 21h2

Operating System

Vulnerable

Version: < 10.0.19044.5965

CPE:

cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*

💻

microsoft / windows 10 22h2

Operating System

Vulnerable

Version: < 10.0.19045.5965

CPE:

cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*

💻

microsoft / windows 11 22h2

Operating System

Vulnerable

Version: < 10.0.22621.5472

CPE:

cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*

💻

microsoft / windows 11 23h2

Operating System

Vulnerable

Version: < 10.0.22631.5472

CPE:

cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*

💻

microsoft / windows 11 24h2

Operating System

Vulnerable

Version: < 10.0.26100.4270

CPE:

cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*

💻

microsoft / windows server 2008

Operating System

Vulnerable

Version: All versions

Target HW: x64

CPE:

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*

💻

microsoft / windows server 2008

Operating System

Vulnerable

Version: All versions

Target HW: x86

CPE:

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*

💻

microsoft / windows server 2008

Operating System

Vulnerable

Version: r2

Target HW: x64

CPE:

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

💻

microsoft / windows server 2012

Operating System

Vulnerable

Version: All versions

CPE:

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

💻

microsoft / windows server 2012

Operating System

Vulnerable

Version: r2

CPE:

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

💻

microsoft / windows server 2016

Operating System

Vulnerable

Version: < 10.0.14393.8148

CPE:

cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

💻

microsoft / windows server 2019

Operating System

Vulnerable

Version: < 10.0.17763.7434

CPE:

cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*

💻

microsoft / windows server 2022

Operating System

Vulnerable

Version: < 10.0.20348.3745

CPE:

cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*

💻

microsoft / windows server 2022 23h2

Operating System

Vulnerable

Version: < 10.0.25398.1665

CPE:

cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*

💻

microsoft / windows server 2025

Operating System

Vulnerable

Version: < 10.0.26100.4270

CPE:

cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*

21 products•scroll for more

Metrics

8.8 HIGHCVSS v3.1[email protected]

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:

NETWORK

Complexity:

LOW

Privileges:

LOW

User Interaction:

NONE

Confidentiality:

HIGH

Integrity:

HIGH

Availability:

HIGH

Scope:

UNCHANGED

🔍 Technical Details

Analysis Status

Analyzed

CVSS Details

8.8 (HIGH)v3.1

Source: [email protected]

EPSS Details

35.3% (Medium)96.8th percentile

Last updated: Oct 29, 2025

Exploitation probability within 30 days

Published Date

Jun 10, 2025 (4 months ago)

Last Modified

Oct 27, 2025 (4 days ago)

Security Weaknesses1

CWE-284

Available exploits (37)

🔐 Sign-in Required

References5

NVDadvisoryadvisory+2