CVE intelligence

CVE-2026-33829

Vulnerability intelligence

Published Apr 14, 2026Sources checked Sep 27, 2026

4.3MEDIUMCVSS out of 10

What this means

Review the available evidence

CVE-2026-33829 and is rated Medium severity with a CVSS score of 4.3. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

Public exploit: Cataloged public exploit.

Exploit-DB: Windows Snipping Tool - NTLMv2 Hash Hijack (2026-09-23 21:40:27.335989+00)

CISA KEVNot listedBased on the latest collected catalog

EPSS2.0%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-33829?

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.