CVE-2025-33073

CVE-2025-33073 is a critical improper access control vulnerability in Windows SMB that allows an authorized attacker to elevate privileges over a network. With a CVSS score of 8.8 (HIGH), this flaw presents a significant risk, enabling full compromise of confidentiality, integrity, and availability (C:H/I:H/A:H) with low attack complexity. This vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog, and public exploit code (EDB-52330) is available, demonstrating privilege escalation and remote code execution. The high EPSS score, extensive community discussion, and media coverage underscore the urgency and widespread concern surrounding this flaw.