Back to the CVE list
CVE-2025-33053 CISA KEV · Actively exploited

Vulnerability in Microsoft Windows 10 1507

CVSS score

8.8

EPSS probability

%87.0

Risk score

15.3

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

POC for CVE-2025-33053 WebDav Exploit, demonstrating how the vulnerability can be triggered in a real environment. This repository focuses on hands-on exploitation steps, reproducible test cases, and observable impact, helping security researchers and defenders understand the issue and validate fixes.

Public PoCSource updated: 18.12.2025 09:08:57

POC exploit for CVE-2025-33053 (external control of file execution path in URL file)

Public PoCSource updated: 22.05.2026 05:24:11

Proof-of-Concept for CVE-2025-33053 Exploiting WebDAV with .url file delivery to demonstrate realistic remote code execution. Includes a decoy PDF payload and a video-only showcase of potential command-and-control capabilities.

Public PoCSource updated: 16.04.2026 14:12:19

CVE-2025-33053 Checker and PoC

Public PoCSource updated: 27.06.2025 05:25:31

CVE-2025-33053 Proof Of Concept (PoC)

Public PoCSource updated: 12.10.2026 17:43:08

https://research.checkpoint.com/2025/stealth-falcon-zero-day/

Exploit reference

https://www.vicarius.io/vsociety/posts/cve-2025-33053-detection-script-remote-code-execution-vulnerability-in-microsoft-webdav

Exploit reference

https://www.vicarius.io/vsociety/posts/cve-2025-33053-mitigation-script-remote-code-execution-vulnerability-in-microsoft-webdav

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-33053"