CVE intelligence

CVE-2026-33829

Vulnerability intelligence

Published Apr 14, 2026Sources checked Nov 14, 2026

4.3MEDIUMCVSS out of 10

What this means

Review the available evidence

CVE-2026-33829 and is rated Medium severity with a CVSS score of 4.3. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

Public exploit: Cataloged public exploit.

Exploit-DB: Windows Snipping Tool - NTLMv2 Hash Hijack (2026-09-23 21:40:27.335989+00)
Exploit-DB lists a public exploit or proof of concept for this CVE. SecurityAlert has not executed it; this is not evidence of attacks against your systems.

What to do next

Remediation and response

Microsoft Security Response Center guidance

Vendor revision: Apr 14, 2026

Vendor remediation details

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768. Install KB5082198. Install KB5082127. Install KB5082126.

Vendor-listed releases

10.0.17763.8644
10.0.20348.5020
10.0.19044.7184
10.0.19045.7184
10.0.26100.32690
10.0.26200.8246
10.0.22631.6936
10.0.25398.2274
10.0.26100.8246
10.0.28000.1836
10.0.14393.9060
6.2.9200.26026
6.3.9600.23132

CISA KEVNot listedBased on the latest collected catalog

EPSS3.6%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-33829?

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

Source: NVD