Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 14 products
| Date | Total | Labels |
|---|
| 2026-05-12 | 1 | Patch1 |
| 2026-05-13 | 1 | General1 |
| 2026-05-15 | 1 | Disclosure1 |
#windowsupdate #microsoft ●悪用可能性 －悪用の事実を確認済み：0 件 －悪用される可能性が高い：13 件 ・CVE-2026-33835 7.8 Windows Cloud Files Mini Filter Driver ・CVE-2026-33837 7.8 Windows TCP/IP ・CVE-2026-33840 7.8 Windows Win32K: ICOMP つづく… https://x.com/kawn2020/status/2054357169261490453
Post summary
The tweet lists several CVEs with high exploitation likelihood but does not provide evidence of active attacks, PoCs, or remediation steps.
CVE-2026-33837 | Microsoft Windows up to Server 2025 TCP/IP heap-based overflow (WID-SEC-2026-1489) https://ift.tt/H1PFXwr A vulnerability classified as critical has been found in Microsoft Windows. Affected is an unknown function of the component TCPIP. The manipulation leads…
Post summary
A critical heap‑based overflow vulnerability (CVE‑2026‑33837) has been disclosed for Microsoft Windows TCP/IP component, though details remain sparse.
🪟 CVE-2026-33837: tcpip.sys heap overflow → kernel privesc. Not wormable, sure… but “authorized low-privilege” is basically “already inside.” Patch fast. #Windows #Security https://windowsforum.com/threads/cve-2026-33837-fix-guide-local-tcpip-sys-heap-overflow-privilege-escalation.417924/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #TcpipSys #PrivilegeEscalation #Cve202633837 https://t.co/jbbTaVoizE
Post summary
The post highlights CVE‑2026‑33837 as a kernel privilege‑escalation flaw via a tcpip.sys heap overflow, notes it is not wormable, and urges users to apply the quick patch as outlined in the provided fix guide.
25 of 25 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | arm64 |
| OS | microsoft | windows_10_21h2 | - | - | x64 |
| OS | microsoft | windows_10_21h2 | - | - | x86 |
| OS | microsoft | windows_10_22h2 | - | - | arm64 |
| OS | microsoft | windows_10_22h2 | - | - | x64 |
| OS | microsoft | windows_10_22h2 | - | - | x86 |
| OS | microsoft | windows_11_23h2 | - | - | arm64 |
| OS | microsoft | windows_11_23h2 | - | - | x64 |
| OS | microsoft | windows_11_24h2 | - | - | arm64 |
| OS | microsoft | windows_11_24h2 | - | - | x64 |
| OS | microsoft | windows_11_25h2 | - | - | arm64 |
| OS | microsoft | windows_11_25h2 | - | - | x64 |
| OS | microsoft | windows_11_26h1 | - | - | arm64 |
| OS | microsoft | windows_11_26h1 | - | - | x64 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2022_23h2 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | - |