CVE-2026-33829

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 2, 2026

Last Seen

June 3, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Unpatched NTLM Vulnerability in Windows URI Handlers Exposes Credentials48.9

A newly identified flaw in Windows URI handlers can leak NTLMv2 hashes to attacker-controlled servers with a single link click. This vulnerability is related to CVE-2026-33829, which was patched in the Windows Snipping Tool on April 14, 2026, but no CVE has been assigned for this variant. The issue...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Unpatched NTLM Vulnerability in Windows URI Handlers Exposes Credentials

Jun 3·6 sources

Related Entities

Data Breach Phishing Microsoft CWE-200 - Exposure of Sensitive Information CWE-20 - Improper Input Validation T1110 - Brute Force T1566 - Phishing T1003 - OS Credential Dumping T1021 - Remote Services T1041 - Exfiltration Over C2 Channel Windows Edge

CVE-2026-33829

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Unpatched NTLM Vulnerability in Windows URI Handlers Exposes Credentials

Related Articles (4)

Windows Search URI Handler Vulnerability Exposes NTLMv2 Hashes to Remote Attackers

Windows Search URI Handler Flaw Leaks NTLMv2 Hashes to Attacker

Unpatched NTLM Leakage in Windows search: URI Handler, Same Bug, No CVE, No Fix

Unpatched NTLM Coercion in Windows search: URI Handler, Same Bug, No CVE, No Fix

Related Entities