vulnerability

Microsoft Windows: CVE-2025-33054: Remote Desktop Spoofing Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:N)

Published

Jul 8, 2025

Added

Jul 8, 2025

Modified

May 8, 2026

Description

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network.

Solutions

microsoft-windows-windows_11-22h2-kb5062552microsoft-windows-windows_11-23h2-kb5062552microsoft-windows-windows_11-24h2-kb5062553microsoft-windows-windows_server_2025-24h2-kb5062553

References

CVE-2025-33054
https://attackerkb.com/topics/CVE-2025-33054
CWE-357
EUVD-EUVD-2025-20659
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-20659
https://support.microsoft.com/help/5062552
https://support.microsoft.com/help/5062553

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report