CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-48503 | Apple Web Content Bounds-Check Flaw Enables Code Execution Across iOS, macOS, Safari | 8.8 | 3% | KEV | KEV |
CVE-2025-2747+1 related CVE | Authentication Bypass in Kentico Xperience CMS Staging Sync Server | 9.8 | 97% | KEVPoC | KEV |
| CVE-2025-33073 | Improper Access Control Privilege Escalation in Microsoft Windows SMB Client | 8.8 | 83% | KEV | KEV |
| CVE-2025-61884 | Unauthenticated SSRF in Oracle E-Business Suite Configurator | 7.5 | 96% | KEVRansomwarePoC | KEV |
From the original article
2 min read at helpnetsecurity.com
CVE-2025-33073, a Windows SMB Client vulnerability that Microsoft fixed in June 2025, is being exploited by attackers. The confirmation comes from the Cybersecurity and Infrastructure Security Agency (CISA), which has added the flaw to its Known Exploited Vulnerabilities catalog, presumably based on credible reports.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.