Loading story…
Microsoft disclosed CVE-2025-33053, an Important remote code execution flaw in Internet Shortcut Files that affects all supported versions of Windows and carries a CVSS 8.8 rating. The vulnerability is tied to CWE-73 (external control of file name or path) and can let an unauthenticated attacker execute code over a network if a user clicks a specially crafted URL. Microsoft said the bug had been exploited in the wild, that functional exploit code was available, and that security updates had been released.
The advisory said the issue has implications beyond legacy browser use because underlying MSHTML, EdgeHTML, and scripting components remain supported on some platforms and are still used by Internet Explorer mode, the WebBrowser control, WebView, and some UWP applications. Microsoft also noted that IE cumulative updates still matter for certain older Windows Server systems, and later revised the advisory to correct the CVE title and description without changing the technical impact. Related Microsoft advisories show the flaw joins a broader pattern of remote code execution risks across Windows and server products, including MSHTML, Hyper-V, Exchange Server, and SharePoint Server.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Microsoft updated the CVE-2025-33053 advisory to correct the CVE title and description. The company noted the June 19 change was informational only.
Microsoft published advisory CVE-2025-33053 for an Internet Shortcut Files remote code execution vulnerability affecting supported Windows versions. The company said the flaw was being exploited in the wild, functional exploit code was available, and an official fix was released.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
msrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft’s latest security updates include a broad set of fixes across Windows, Office, Azure, Exchange, SharePoint, Remote Desktop, and other enterprise products, with several critical issues rated as highly likely to be exploited. Among the most serious is **`CVE-2026-47291`**, a critical **HTTP.sys** flaw with a **CVSS 9.8** score that can reportedly allow **unauthenticated remote code execution** in the Windows kernel-mode HTTP protocol stack, potentially giving attackers **SYSTEM-level** access. Microsoft also flagged multiple other high-risk issues in core Windows components and network-facing services, including vulnerabilities in **DHCP**, the **NT OS Kernel**, **NTLM**, **Remote Desktop Client**, and **SharePoint**. Separate Microsoft disclosures also detail new **Microsoft Edge (Chromium-based)** flaws affecting versions earlier than **`150.0.4078.48`**. These include **`CVE-2026-58281`**, a **deserialization of untrusted data** bug that can lead to remote code execution, and **`CVE-2026-58596`**, an **untrusted pointer dereference** issue that can enable elevation of privilege. Both vulnerabilities require user interaction but carry high impact if exploited, reinforcing concerns that browser and internet-exposed Windows components remain priority targets as vendors accelerate patch releases in response to faster vulnerability discovery and exploitation timelines.
Jul 14, 2026
Microsoft released security update **3034682** to address **41 vulnerabilities** in Internet Explorer **6 through 11**, including multiple flaws that could allow **remote code execution** if a user visited a specially crafted webpage. The most severe issues could let an attacker run code with the same privileges as the current user, making the risk highest on systems where users have administrative rights. Microsoft rated the bulletin **Critical** for affected Windows client systems and **Moderate** for affected Windows server systems. The bulletin said one flaw, **CVE-2015-0071**, had been exploited in the wild, while **CVE-2014-8967** had been publicly disclosed before the patch was issued. Microsoft said the update corrects memory corruption and permission-validation issues, improves **ASLR** behavior, and strengthens cross-domain policy enforcement. It also noted that systems running Internet Explorer **9, 10, and 11** require updates **3021952** and **3034196** for full protection, with **3023607** and, on some platforms, **3036197** also potentially installed automatically.
Jun 29, 2026
Microsoft published Security Update Guide entries for two Windows remote code execution vulnerabilities affecting different core components: **CVE-2022-41118** in **Windows Scripting Languages** and **CVE-2025-59295** in **Windows URL Parsing**. Both advisories classify the issues as remote code execution flaws, indicating that successful exploitation could allow an attacker to run arbitrary code on a targeted Windows system. The disclosures point to risk across widely used Windows functionality rather than a single application, underscoring the need for defenders to review affected product versions and apply Microsoft-issued updates through normal patch management channels. The vulnerabilities are tracked under the identifiers `CVE-2022-41118` and `CVE-2025-59295`, with Microsoft maintaining the authoritative remediation details in its Security Update Guide.
Jul 12, 2026