CVE coverage
View on NVD →
CVE-2025-33073
CVSS 8.8
Actively exploited (KEV)
9 detections found
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential Kerberos Relay Attack against a Computer Account | production | 2026-09-18 |
| splunk | DNS Kerberos Coercion | production | 2026-09-08 |
| splunk | Windows Credential Target Information Structure in Commandline | production | 2026-05-13 |
| splunk | Windows Kerberos Coercion via DNS | production | 2026-05-13 |
| splunk | Windows Short Lived DNS Record | production | 2026-05-13 |
| sigma | Suspicious DNS Query Indicating Kerberos Coercion via DNS Object SPN Spoofing | experimental | 2025-06-20 |
| sigma | Potential Kerberos Coercion by Spoofing SPNs via DNS Manipulation | experimental | 2025-06-20 |
| sigma | Attempts of Kerberos Coercion Via DNS SPN Spoofing | experimental | 2025-06-20 |
| sigma | Suspicious DNS Query Indicating Kerberos Coercion via DNS Object SPN Spoofing - Network | experimental | 2025-06-20 |