Vulnerabilities

CVSS

4.3 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Risk score

34.4

Published

2026-04-14

Status

Modified

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

Weaknesses

CWE-200

Coverage 1

vulnerability

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to the attacker. Like in the case of CVE-2026-33829, which impacted the Windows Snipping Too…

The Hacker News · Jun 3, 2026 Medium

CVE-2026-33829CVE-2023-35636

All articles mentioning it

Advisories and references

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33829
• github.com/blackarrowsec/redteam-research/tree/master/CVE-2026-33829