Feds Flag Active Exploitation of Patched Windows SMB Vuln

Feds flag active exploitation of patched Windows SMB vuln

: CISA adds high-severity flaw to KEV list, urges swift updating

CISA: High-severity Windows SMB flaw now exploited in attacks

CISA says threat actors are now actively exploiting a high-severity Windows SMB privilege escalation vulnerability that can let them gain SYSTEM privileges on unpatched systems.

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073)

CVE-2025-33073, a Windows SMB Client vulnerability that Microsoft fixed in June 2025, is being exploited by attackers. The confirmation comes from the Cybersecurity and Infrastructure Security Agency (CISA), which has added the flaw to its Known Exploited Vulnerabilities catalog, presumably based on credible reports. About CVE-2025-33073 CVE-2025-33073 allows for privilege escalation, enabling attackers to gain SYSTEM (highest) privileges on a v…

Active Exploitation Of Windows SMB Flaw CVE-2025-33073 Spotted

A flaw rooted in the Server Message Block (SMB) protocol of Windows enables attackers to escalate privileges to SYSTEM level on vulnerable Windows devices, potentially granting full control over affected systems.  The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of this high-severity Windows vulnerability, tracked as CVE-2025-33073. Details of the CVE-2025-33073 SMB Flaw CVE…