sign in--:--:--UTC

CVE-2026-33825

exploited in the wild

CVSS

—

Reports

10

First seen

Apr 17

Last seen

Jun 17

Affected product

Microsoft Defender

Associated actors

Nightmare Eclipse ×2 GHOST STADIUM ×1 RansomHouse ×1 Shadow-Earth-053 ×1 ShinyHunters ×1 Storm-2949 ×1 TeamPCP ×1 Chaotic Eclipse ×1 UAT-8616 ×1

Recent reports

Microsoft Confirms RoguePlanet Defender Zero-Day, Patch in Development

The Hacker NewsJun 17 High

Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days

Bleeping ComputerJun 10 High

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The Hacker NewsJun 10 High

CERT-EU Cyber Brief May 2026 – Espionage, Supply-Chain Attacks, and Ransomware Infrastructure Disruption

CERT-EU Threat IntelJun 2 Critical

Critical Windows Netlogon RCE Flaw Actively Exploited in Attacks

Bleeping ComputerJun 1 High

Microsoft Condemns Uncoordinated Zero-Day Disclosures; Researcher's GitHub Account Removed

The Hacker NewsMay 28 High

Microsoft shares mitigation for YellowKey Windows zero-day

Bleeping ComputerMay 20 High

Windows Zero-Days: BitLocker Bypass (YellowKey) and CTFMON Privilege Escalation (GreenPlasma)

The Hacker NewsMay 14 High

Nightmare-Eclipse Tooling Observed in Real-World Intrusion Campaign

Huntress BlogApr 20 High

Microsoft April 2026 Patch Tuesday: 163 CVEs including 8 critical, 1 in-the-wild exploit

Sophos NewsApr 17

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans