CVE-2025-33071
Published: 10 June 2025
Summary
CVE-2025-33071 is a high-severity Use After Free (CWE-416) vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 8.1 (High).
Operationally, ranked in the top 21.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2025-33071 is a use-after-free vulnerability, tracked under CWE-416, that affects the Windows KDC Proxy Service (KPSSVC). The flaw received a CVSS v3.1 score of 8.1 and permits remote code execution when successfully triggered.
An unauthorized attacker can exploit the issue over a network without authentication or user interaction. Successful exploitation grants the attacker the ability to execute arbitrary code with high impact on confidentiality, integrity, and availability, although the attack complexity is rated high.
The Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33071 is the primary reference for official guidance. The EPSS score remains low, with a current value of 0.0113 and a peak of 0.0147.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-17772
Vulnerability details
Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Use-after-free exploits that achieve arbitrary code execution are blocked or significantly hardened by non-executable pages and ASLR.