Main
Vulnerability Database
Exploits
ID:11660 - Exploit for External Control of File Name or Path in Microsoft products - CVE-2025-33053
ID:11660 - Exploit for External Control of File Name or Path in Microsoft products - CVE-2025-33053
Published: June 20, 2025
Vulnerability identifier: #VU110708
Vulnerability risk: Critical
CVE-ID: CVE-2025-33053
CWE-ID: CWE-73
Exploitation vector: Remote access
Vulnerable software:
Windows
Windows Server
Microsoft Internet Explorer
Windows
Windows Server
Microsoft Internet Explorer
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to incorrect processing of file path in WebDav links. A remote attacker can trick the victim into clicking on a specially crafted link and execute arbitrary code on the system.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install updates from vendor's website.