CVE-2026-33825

exploited in the wild☆ pin
CVSS
Reports
15
First seen
Apr 17, 2026
Last seen
Aug 11, 2026
Affected product

Microsoft Defender

Associated actors

Recent reports

High

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks

Bleeping Computer
High

IT threat evolution in Q2 2026: Ransomware, miners, and vulnerability exploitation

Kaspersky Securelist
High

Microsoft Patches RoguePlanet Defender Privilege Escalation Flaw

The Hacker News
High

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

The Hacker News
High

CISA: Windows BlueHammer Privilege Escalation Flaw Exploited by Ransomware Gangs

Bleeping Computer
High

Microsoft Confirms RoguePlanet Defender Zero-Day, Patch in Development

The Hacker News
High

Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days

Bleeping Computer
High

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The Hacker News
High

CERT-EU Cyber Brief May 2026 – Espionage, Supply-Chain Attacks, and Ransomware Infrastructure Disruption

CERT-EU Threat Intel
Critical

Critical Windows Netlogon RCE Flaw Actively Exploited in Attacks

Bleeping Computer
High

Microsoft Condemns Uncoordinated Zero-Day Disclosures; Researcher's GitHub Account Removed

The Hacker News
High

Microsoft shares mitigation for YellowKey Windows zero-day

Bleeping Computer
High

Windows Zero-Days: BitLocker Bypass (YellowKey) and CTFMON Privilege Escalation (GreenPlasma)

The Hacker News
High

Nightmare-Eclipse Tooling Observed in Real-World Intrusion Campaign

Huntress Blog
High

Microsoft April 2026 Patch Tuesday: 163 CVEs including 8 critical, 1 in-the-wild exploit

Sophos News

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.