{"uuid": "d53f116d-cf0e-40f3-b2cb-d30d27785b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-33073", "type": "seen", "source": "https://t.me/pphm_HackerNews/1710", "content": "\ud83d\udd34 PoC Released for NTLM reflection bypass Vulnerability that Emanbles SYSTEM Access on Windows Server\n\nA proof-of-concept has been published that bypasses Microsoft\u2019s mitigation for the NTLM reflection vulnerability tracked as CVE-2025-33073 and allows escalation to NT AUTHORITY\\SYSTEM on Windows Server. \n\nThe exploit leverages two conceptual weaknesses left unaddressed by the original patch: the mitigation was limited to the SMB client path, and recent SMB features let attackers coerce privileged services into authenticating over attacker-controlled TCP connections.\n\nThe result is a practical local privilege escalation and, in chained scenarios, remote command execution on vulnerable servers.", "creation_timestamp": "2026-08-22T00:00:27.279127Z"}