CyberSec.Space Logo
Back to CVE Browser

CVE-2025-33053

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-06-10
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

Affected Platforms (CPE)

💻
Microsoft

Windows 10 1507

< 10.0.10240.21034
💻
Microsoft

Windows 10 1607

< 10.0.14393.8148
💻
Microsoft

Windows 10 1809

< 10.0.17763.7434
💻
Microsoft

Windows 10 21h2

< 10.0.19044.5965

References & Advisories

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053
🔗 https://research.checkpoint.com/2025/stealth-falcon-zero-day/
🔗 https://therecord.media/microsoft-cisa-zero-day-turkish-defense-org
🔗 https://www.bleepingcomputer.com/news/security/stealth-falcon-hackers-exploited-windows-webdav-zero-day-to-drop-malware/
🔗 https://www.darkreading.com/vulnerabilities-threats/stealth-falcon-apt-exploits-microsoft-rce-zero-day-mideast
🔗 https://www.theregister.com/2025/06/10/microsoft_patch_tuesday_june/
🔗 https://www.vicarius.io/vsociety/posts/cve-2025-33053-detection-script-remote-code-execution-vulnerability-in-microsoft-webdav
🔗 https://www.vicarius.io/vsociety/posts/cve-2025-33053-mitigation-script-remote-code-execution-vulnerability-in-microsoft-webdav

Related Security Intelligence Articles

Global Cyber Intel Digest: July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

2026-07-21

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Global Cyber Intel Digest: July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

2026-07-24

Related Vulnerabilities

CVE-2026-579174.8

proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing th...

CVE-2026-106816.5

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permiss...

CVE-2026-645239.8

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit ha...

CVE-2026-64491

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascam_di...