CVE-2025-33073: listed in the CISA KEV catalog
CVE-2025-33073 · CVSS 8.8 HIGH · EPSS 80% · KEV 2025-10-20
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
Is CVE-2025-33073 exploited?
- Listed in the CISA KEV catalog on 2025-10-20.
- Federal remediation due 2025-11-10.
- Past that date by 278 days.
- EPSS puts exploitation in the next 30 days at 80%.
- Public exploit code: proof of concept.
Which products and versions are affected?
No affected package list recorded here yet.
Is there a patch?
No patch identifier recorded here yet.
What PlainSec published about CVE-2025-33073
PlainSec has not published a story about this CVE.
Primary sources
What this record does not say
- No affected package data.
- No patch identifier.
KEV and EPSS are re-checked daily. Record last updated 2026-08-11.