Elevation of Privilege Vulnerability in Windows Netlogon
CVE-2025-33070

8.1HIGH

Key Information:

Vendor

Microsoft
Status
Windows 10 Version 1809
Windows Server 2019
Windows Server 2019 (server Core Installation)
Windows Server 2022
Vendor
CVE Published:
10 June 2025

What is CVE-2025-33070?

A vulnerability exists in Windows Netlogon that could allow an unauthorized attacker to exploit uninitialized resources. This could enable the attacker to elevate their privileges over a network, compromising system security and user data. It is crucial for network administrators to apply updates from Microsoft to mitigate this risk and protect their systems from potential exploitation.

Affected Version(s)

Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21034

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8148

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7434

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-33070 : Elevation of Privilege Vulnerability in Windows Netlogon