CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073)
October 21, 2025 – Published on Help Net Security
CVE-2025-33073, a Windows SMB Client vulnerability that Microsoft fixed in June 2025, is being exploited by attackers.
The confirmation comes from the Cybersecurity and Infrastructure Security Agency (CISA), which has added the flaw to its Known Exploited Vulnerabilities catalog, presumably based on credible reports.
CVE-2025-33073 allows for privilege escalation, enabling attackers to gain SYSTEM (highest) privileges on a vulnerable Windows or Windows Server system.
When Microsoft released the fix, it said that the vulnerability was publicly disclosed but not actively exploited.
On the following day, the company attributed discovery of the flaw to a number of researchers, including GuidePoint Security’s Cameron Stish. Cameron also published technical details about the vulnerability.
Read more HERE.