CVE-2026-33829: Exposure of sensitive information to an unauthorized actor

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

• EPSS 3.4% (88.1% percentile)
• CVSS 4.3 medium

Detection rules

• Potential CVE-2026-33829 Exploitation - Windows Snipping Tool Remote File Path URI high

Related briefings

• One Click on a Windows Search Link Can Leak Your Password Hash 2026-06-06

Browse the CVE database

Read the full analysis on IntelFusions