This vulnerability (CVE-2025-33073) affects Microsoft Windows 10 Version 1507 (build 10.0.10240.0) and is classified as CWE-284: Improper Access Control. It involves the SMB service allowing an authorized attacker to elevate privileges remotely over the network. The CVSS 3.1 vector indicates low attack complexity, no user interaction, and partial privileges required initially. The impact includes high confidentiality, integrity, and availability consequences. The vulnerability was published on June 10, 2025, but no official patch or vendor advisory detailing remediation is currently available.

An attacker with authorized network access to the vulnerable Windows 10 Version 1507 SMB service can elevate their privileges, potentially gaining higher-level control over the system. This could lead to full system compromise, affecting confidentiality, integrity, and availability of the affected system. No known exploits are reported in the wild, but the high CVSS score reflects the serious nature of the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations should monitor Microsoft advisories closely and consider limiting network exposure of SMB services on affected Windows 10 Version 1507 systems until a fix is available.