CVE-2025-33053

Published Jun 10, 2025

Last updated 2 days ago

Windows WebDAV Client

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-33053 is a remote code execution vulnerability affecting the WebDAV client in Microsoft Windows. It stems from insufficient input validation in WebDAV file path handling, allowing an attacker to execute arbitrary code over a network. Successful exploitation requires a user to click on a specially crafted WebDAV URL, potentially leading to unauthorized access to sensitive system resources, compromise of system integrity and confidentiality, or even full control of the affected system. This vulnerability has been actively exploited in the wild.

Description: External control of file name or path in WebDAV allows an unauthorized attacker to execute code over a network.
Source: secure@microsoft.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Web Distributed Authoring and Versioning (WebDAV) External Control of File Name or Path Vulnerability
Exploit added on: Jun 10, 2025
Exploit action due: Jul 1, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-73

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 25

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "FCC2974E-F0F4-4F33-9CCE-2CEA45A3AD86",
            "versionEndExcluding": "10.0.10240.21034"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "A94EDBE2-AAFF-4E9A-A9E5-9B02ADB94471",
            "versionEndExcluding": "10.0.10240.21034"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "21CF85F1-CE6E-4AA2-B686-20766DB23D46",
            "versionEndExcluding": "10.0.14393.8148"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "10F0F3D2-00CD-4F52-B31E-DEA656DBD8B3",
            "versionEndExcluding": "10.0.14393.8148"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "F081F99C-6E6A-4AB2-8DE8-6457582D80D6",
            "versionEndExcluding": "10.0.17763.7434"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "7D9FCD92-0CED-43D3-87E0-630B80AC1A89",
            "versionEndExcluding": "10.0.17763.7434"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "5FA5B611-90EC-4193-A474-96EDB55A96A4",
            "versionEndExcluding": "10.0.19044.5965"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "7701107A-E092-4A9B-B9C6-EAB80E361FA7",
            "versionEndExcluding": "10.0.19044.5965"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "B85A61A0-B9ED-4011-9606-66C506076E4E",
            "versionEndExcluding": "10.0.19044.5965"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "02C5B4FB-7681-435F-A93F-B9D822165CB5",
            "versionEndExcluding": "10.0.19045.5965"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "7DD81C00-6C67-4D4A-9A3B-9BCD9AD4157F",
            "versionEndExcluding": "10.0.19045.5965"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "FA4ADE3C-2E1D-4CD9-8FC1-D2D061D4CDE2",
            "versionEndExcluding": "10.0.19045.5965"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "80E9DC0B-FA82-4A9A-8F40-193AB9527A89",
            "versionEndExcluding": "10.0.22621.5472"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "B8108CE7-3EF2-4A2C-9A88-672615563A92",
            "versionEndExcluding": "10.0.22621.5472"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "A12EA244-1390-49C8-B384-039D86779F44",
            "versionEndExcluding": "10.0.22631.5472"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "99251B3D-CB95-462F-8D92-31FCC1869565",
            "versionEndExcluding": "10.0.22631.5472"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "76A15955-21E1-489C-868F-8BE0BAEF829B",
            "versionEndExcluding": "10.0.26100.4349"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "DDE60590-ECC9-4F96-95E1-8FFBF4870A28",
            "versionEndExcluding": "10.0.26100.4349"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A9B7111D-5C1D-415B-8ED4-F891B4832B18",
            "versionEndExcluding": "10.0.14393.8148"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E77CCA1-2FF6-429B-85A6-81E2B7C6B08F",
            "versionEndExcluding": "10.0.17763.7434"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F542F853-E04A-45A6-AE08-DCF9A3A3B1BF",
            "versionEndExcluding": "10.0.20348.3807"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "665E7816-E1F2-479C-9E02-82B7FF389D8E",
            "versionEndExcluding": "10.0.25398.1665"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "C28BF26E-547E-4CC5-8F0A-29D6419F1053",
            "versionEndExcluding": "10.0.26100.4349"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.