CVE-2025-33053—Microsoft Windows External Control of File Name or Path Vulnerability

漏洞名称

Microsoft Windows External Control of File Name or Path Vulnerability

描述

Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-33053
• https://nvd.nist.gov/vuln/detail/CVE-2025-33053

相关新闻文章

• Microsoft fixes Surface Hub boot issues with emergency updateJune 17, 2025
• Microsoft: KB5060533 update triggers boot errors on Surface Hub v1 devicesJune 13, 2025
• Windows 11 24H2 emergency update fixes Easy Anti-Cheat BSOD issueJune 12, 2025
• Hackers exploited Windows WebDav zero-day to drop malwareJune 11, 2025
• Microsoft creates separate Windows 11 24H2 update for incompatible PCsJune 11, 2025

相关 CWE

• CWE-73