CVE-2025-33053

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 3 articles

VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

47.02%

probability

This CVE has a 47.02% probability of being exploited in the next 30 days.

0% Top 97.7th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero

Internet Shortcut Files Remote Code Execution Vulnerability

Attack Intelligence

CWE-610 · Externally Controlled Reference to a Resource in Another Sphere CWE-642 · External Control of Critical State Data CWE-664 · Improper Control of a Resource Through its Lifetime CWE-668 · Exposure of Resource to Wrong Sphere CWE-73 · External Control of File Name or Path

Google Project Zero

Patched

June 10, 2025

Reported by

Alexandra Gofman and David Driker (Check Point Research)

Root Cause Analysis

???

Exploits & PoC

DevBuiHieu/CVE-2025-33053-Proof-Of-Concept

CVE-2025-33053 Proof Of Concept (PoC)

kra1t0/CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept

Proof-of-Concept for CVE-2025-33053 Exploiting WebDAV with .url file delivery to demonstrate realistic remote code execution. Includes a decoy PDF pa

TheTorjanCaptain/CVE-2025-33053-Checker-PoC

CVE-2025-33053 Checker and PoC

4n4s4zi/CVE-2025-33053_PoC

POC exploit for CVE-2025-33053 (External control of file execution path in URL file)

Cyberw1ng/CVE-2025-33053-POC

POC for CVE-2025-33053 WebDav Exploit, demonstrating how the vulnerability can be triggered in a real environment. This repository focuses on hands-on

5 repos — triés par ⭐ Rechercher sur GitHub ↗

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild

TheHackerNews

Hackers exploited Windows WebDav zero-day to drop malware

BleepingComputer Jun 11, 2025

Microsoft and Adobe Patch Tuesday, June 2025 Security Update Review

Qualys Jun 10, 2025

Signal Intelligence

Confidenceⓘ

82%

EPSS 47.02%

Mentions 3

Last Seen Jun 11, 2025

CNA Information

Analyst Note

CVE-2025-33053 is confirmed with high severity (CVSS 8.8) affecting Windows 10, documented in Google Project Zero, and supported by evidence of active exploitation for malware delivery via WebDAV. The single article reference and absence from CISA KEV catalog slightly temper confidence, but the combination of authoritative disclosure and real-world attack evidence substantiates the confirmed status.